Security & Compliance Analyst - CompanyCam

Hi, we’re CompanyCam .

We’re a simple-to-use photo documentation and productivity app for contractors of all commercial and home services industries. Packed with intuitive functionality, CompanyCam facilitates unparalleled communication and accountability across a contractor’s entire business. We’re committed to providing a consumer-grade, game-changing experience that helps our users build trust within their company and with their customers.

But don’t let that corporate description fool you—the people behind our buttoned-up product are laid-back (but hardworking), genuine, and kickass, and you could be one of them!

The Role

Security and compliance at CompanyCam isn't a checkbox exercise. It's a business-critical function that sits at the intersection of engineering, product, and leadership, and this role is at the center of it. As our Security & Compliance Analyst , you'll own our continuous compliance monitoring program, administering our Vanta Professional instance, driving alignment across NIST CSF 2.0 and SOC 2 Type II, and translating raw security data into risk intelligence that leadership can actually act on. You'll be the connective tissue between technical teams and the business, keeping compliance moving without slowing anyone down. If you're someone who sees compliance as an asset rather than overhead, this one's for you.

Location: You must live and work permanently in the U.S. to be considered.

What You'll Do

• Administer CompanyCam 's Vanta Professional instance , maintaining automated test coverage, resolving broken integrations, and keeping the compliance dashboard accurate and up to date
• Own our NIST CSF 2.0 and SOC 2 Type II framework alignment , mapping controls efficiently across both frameworks and closing gaps as they surface
• Identify and route compliance gaps , triaging remediation tasks to the right owners and tracking through to resolution
• Maintain evidence libraries and audit trails required for SOC 2 Type II readiness and annual audits
• Prepare risk reporting for the Enterprise Risk Committee , translating technical vulnerabilities and control gaps into clear, prioritized business risk language
• Own the risk register , supporting risk scoring, trending, and remediation tracking alongside the Security & Compliance Lead
• Conduct vendor security assessments and maintain the third-party risk inventory
• Own the intake and response process for inbound security questionnaires from customers and partners
• Act as the cross-functional liaison between Security & Compliance and engineering, IT, and business teams on compliance obligations and remediation timelines
• Support security awareness initiatives , user access reviews, and ongoing compliance program activities

The Impact You'll Have

At CompanyCam , your work makes a real impact.