Information Security Compliance Analyst

Responsibilities

• Conduct comprehensive risk assessments and provide detailed reports on findings and required mitigations.
• Lead the development and maintenance of policies, ensuring they address regulatory requirements.
• Oversee implementation of risk mitigation controls, risk management, and conduct follow-up audits.
• Manage vendor risk assessments, working with third parties to address any gaps.
• Review contractual agreements against compliance standards and in alignment with HMA contractual requirements.

Additional Responsibilities

• Develop and present compliance metrics and reports to senior management and auditors.
• Mentor junior analysts and oversee documentation quality.
• Take the lead on special compliance projects, ensuring alignment with strategic goals.
• Assist with the annual SOC2 audit and other audits or assessments as appropriate.

Qualifications

• Education: Associate’s or Bachelor’s degree in cybersecurity, technology, information systems, or related area or an equivalent combination of education, training, and experience.
• Experience: 3-5 years of relevant experience in Information Security, compliance, governance, or other security-related fields.

Benefits

• Paid Parental Leave and supportive New Parent Benefits.
• Company paid continuing Education & Tuition Reimbursement.
• 401k Profit Sharing.
• Generous time off practices in addition to paid holidays.
• Paid Volunteer time off and employee matching gifts to charities.
• Inclusion & Belonging Programs.
• Discretionary bonus opportunity.