Bangalore or Hyderabad, India | Hybrid (3-4 days in-office) | Vancouver (Pacific Time) working hours |Full-time

About Monachus

Monachus helps early-stage startups build scalable systems for compliance, security, and operations. Without the chaos. We're a small, high-trust team based in Vancouver, BC, and our clients are spread across North America. We work closely with founders and technical teams who are moving fast and need security and compliance done right, not just done.

“Monachus” is Latin for monk, meaning diligent, dedicated, wise. If you care about doing high-quality work, being hands-on in the world of compliance, learning constantly, and having real ownership over outcomes, this is the kind of place where that actually happens.

The Role

We’re hiring a Security Analyst to own the security side of the RFPs, RFIs, and customer security questionnaires our clients receive from prospects and enterprise buyers. These requests are a constant part of how our clients close deals, and the answers have to be accurate, consistent, and backed by evidence every time.

This is a full-time role. You’ll work closely with our GRC and technical consultants to turn complex control environments into clear, defensible answers. At six months, success looks like: deadlines are being met, the response library is current and trusted, and the team no longer needs to re-check your answers before they go out.

What You'll Do

- Own intake and triage of incoming RFPs, RFIs, and security questionnaires across client portals and email
- Draft accurate, consistent responses to technical and security control questions, including access control, encryption, logging, incident response, vulnerability management,



and cloud configuration
- Pull supporting evidence from AWS, Google Workspace, and client systems, and confirm it matches what’s written
- Maintain and version the master response library so answers stay current as controls change
- Route questions to the right technical owner or senior consultant when an answer needs engineering or leadership input
- Flag answers that overpromise or conflict with a client’s actual controls before they go out
- Track deadlines and status across multiple active requests, keeping stakeholders updated

What We're Looking For

Experience & Background

- Three or more years in security, IT, or compliance, with hands-on experience answering security questionnaires or the security sections of RFPs
- Working knowledge of common security controls in cloud environments, especially AWS, and how they map to SOC 2 and ISO 27001
- Able to read a technical control and explain it accurately in plain language to a non-technical buyer
- Strong written communication, with careful attention to accuracy and consistency
- Comfortable managing competing deadlines and client expectations
- Comfortable with ambiguity and a fast, startup pace

Tools & Systems

- Familiarity with (or fast to learn) AWS, Google Workspace, Slack, and task trackers
- Experience with security questionnaire tools,



trust-center platforms, or GRC software

Bonus Points

- Hands-on security background in vulnerability management, cloud hardening, SIEM, or incident response
- Prior experience with vendor-risk tooling
- Exposure to using AI tools for drafting and research, with good judgment about when outputs need verification
- Experience writing for both technical and sales audiences
- Experience working remotely with North American clients

Culture Fit Matters at Monachus

You’ll Thrive Here If You

- Constantly look for ways to improve systems, workflows, and delivery quality
- Collaborate well and prioritize alignment over ego
- Can take direction, follow operating systems, and improve them instead of fighting them
- Move fast without sacrificing quality
- Take ownership and operate with high accountability
- Enjoy building scalable processes and improving how work gets done
- Are curious about new tools and technologies and actively experiment with AI to improve how work gets done

Why Monachus

- Direct impact with startup founders and leadership teams
- Small, high-trust team with autonomy
- Robust focus on quality, structure, and continuous improvement
- Work that values originality, depth, and thoughtful execution over templates or audit checklists

How to Apply

Send your resume, a short note about your interest in the role, and any relevant links (GitHub, portfolio, LinkedIn) to:

? [email protected]

Applications are reviewed on a rolling basis.

We review every application. If you're a fit, someone from our team will reach out within 5 business days to introduce themselves and share next steps.

📌 Security Analyst (Bengaluru)
🏢 Monachus Solutions
📍 Bengaluru