Security Compliance Analyst

This role conducts audits, manages security and compliance risks, supports remediation efforts, and provides guidance on information security and regulatory requirements. At least three years of experience in compliance, regulatory affairs, legal services, information technology, information security, or a related field.

Security Compliance Analyst
Job Summary

The Security Compliance Analyst supports compliance assurance planning and execution by implementing policies and procedures that promote adherence to applicable laws, regulations, standards, and information security frameworks. This role conducts audits, manages security and compliance risks, supports remediation efforts, and provides guidance on information security and regulatory requirements.

Responsibilities

• Track and interpret laws and regulations affecting business operations and recommend compliance actions to stakeholders.
• Provide guidance on information security issues and identified security risks.
• Create, manage, and enforce information security policies.
• Oversee compliance with applicable information security frameworks.
• Manage audit remediation and corrective action plans.
• Manage vulnerability assessment and remediation efforts.
• Conduct anti-phishing campaigns and security awareness training programs.
• Manage third-party risk assessment and oversight programs.
• Research, analyze, interpret, and monitor records to evaluate compliance with regulations and established programs.
• Conduct system audits and information security risk assessments.
• Conduct initial reviews of alleged compliance violations and escalate issues when appropriate.
• Collaborate with stakeholders on audits, policy updates, regulatory changes, and compliance requirements.
• Analyze, document, compile, and distribute compliance and security resources.
• Perform other related duties as assigned.

Requirements

• Bachelor s degree in computer science, business, or a related field, or equivalent relevant experience.
• At least three years of experience in compliance, regulatory affairs, legal services, information technology, information security, or a related field.
• Experience conducting system audits and information security risk assessments.
• Experience working with external vendors and third-party risk programs.
• Knowledge of information security, business continuity, and disaster recovery practices.
• Familiarity with IT compliance programs, processes, laws, and regulations.
• Experience with ServiceNow preferred.
• Knowledge of information security frameworks such as HIPAA and HITRUST preferred.
• Professional security certification, such as CISSP or a comparable credential, preferred.

Skill

• Written and oral communication
• Reading and listening comprehension
• Critical thinking and problem solving
• Research and information analysis
• Decision making
• Planning and prioritization
• Organization and information collection
• Documentation and recordkeeping
• Standards and regulatory compliance
• Interpersonal communication and relationship building

Summary Qualification

• Compliance and regulatory analysis
• Information security risk management
• Audit and remediation management
• Security policy development and enforcement
• Third-party risk management
• Security awareness and training
• Knowledge of information security frameworks and compliance programs
• Ability to analyze regulations, identify risks, and communicate recommendations

 

Wollborg Michelson Recruiting is an Equal Opportunity Employer and prohibits discrimination of any kind. We ensure job offers are made based of one s employment experience, skills, and qualifications, regardless of race, gender, ethnic origin, or any other classification protected by law. All applicants must furnish proper identification to prove their legal right to work in the US upon a job offer. We participate in E-Verify to confirm one s right to work in the US. Wollborg Michelson Recruiting does not provide sponsorship for an employment-based visa status.