IT Security Engineer

Beghou brings over three decades of experience helping life sciences companies optimize their commercialization through strategic insight, advanced analytics, and technology. From developing go-to-market strategies and building foundational data analytics infrastructures to leveraging artificial intelligence to improve customer insights and engagement, Beghou helps life sciences companies maximize performance across their portfolios. Beghou also deploys proprietary and third-party technology solutions to help companies forecast performance, design territories, manage customer data, organize, and report on medical and commercial data, and more. Headquartered in Evanston, Illinois, we have 10 global offices.
Our mission is to bring together analytical minds and innovative technology to help life sciences companies navigate the complexity of health care and improve patient outcomes.
The SOC Audit & Compliance Analyst plays a critical role in strengthening the organization’s security control maturity and audit posture by bridging technical security operations with governance and assurance requirements. This role ensures that SOC‑related security controls are not only documented, but demonstrably effective through continuous testing, evidence validation, and cross‑functional collaboration.   The position contributes to proactive risk reduction by enabling timely remediation, improving audit outcomes, and embedding a culture of continuous compliance across IT and security teams. Success in this role is measured by audit readiness, control reliability, and the ability to translate complex technical operations into clear, defensible audit evidence.

We'll trust you to:

SOC Audit & Compliance - Support SOC 2 (Type I & Type II), Future ISO 27001 readiness, and internal security audits as they relate to SOC and IT operations. 

• Map security and SOC controls to applicable frameworks (AICPA Trust Services Criteria, ITGCs). 
• Coordinate and manage audit evidence collection from SOC, endpoint, identity, and infrastructure teams. 
• Perform control design and operating effectiveness reviews for SOC adjacent controls. 
• Track audit findings, risks, and remediation actions through closure. 
• Maintain continuous audit readiness rather than point-in-time compliance.    Vulnerability & Remediation Governance - Partner with IT and GRC to support vulnerability management oversight. 
• Review and validate vulnerability findings from Nessus scans. 
• Track remediation of SLAs, compensating controls, and risk exceptions. 
• Perform remediation validation testing post-patching or configuration changes.