Senior Analyst: Security Compliance & Assurance

About the role

The Senior Analyst, Security Compliance & Assurance, supports control owners across the organization by coordinating security compliance activities, validating evidence quality, tracking remediation, and providing transparency across audit, risk, cloud compliance, and vulnerability governance initiatives. This role focuses on assurance, oversight, and coordination, ensuring that security and compliance activities are performed in accordance with company policies, standards, and applicable frameworks.

Responsibilities

• Serves as the central point of contact for internal, external, and regulatory audits (SOC, FFIEC, SOX, ISO, PCI, NIST).
• Manages the end-to-end audit lifecycle, including evidence collection via centralized tooling, control interpretation, and audit readiness activities.
• Supports control owners through first-line assurance by validating control design and operating effectiveness for accuracy and audit quality. Tracks compliance gaps, audit findings, and remediation actions to ensure timely closure.
• Enables cloud-native compliance and SOC readiness for Google Cloud and Azure environments. Partners with product teams to embed compliance requirements early in the lifecycle and clarifies shared responsibility models through technical documentation.
• Provides oversight for vulnerability management by monitoring SLA performance and managing risk exceptions. Supports broader risk assurance activities, including third-party reviews, client due diligence, and the documentation of risk treatment decisions.
• Maintains security governance artifacts by consolidating disparate business unit procedures into a unified framework aligned with corporate policies and standards.
• Develops leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes to drive continuous improvement within the Security Compliance & Assurance function.
• Participates in governance, risk, compliance, and security initiatives for Jack Henry.
• Performs other job duties as assigned.

Requirements

• Bachelor’s degree in Information Security, Information Technology, Risk Management, or a related field.
• Experience coordinating IT compliance and audit activities and supporting compliance requirements for SOC audits.
• Strong working knowledge of cloud-native compliance expectations across multiple platforms.
• Advanced understanding of SOC, FFIEC, ISO, PCI, SOX, NIST control requirements and mapping.
• Skilled in evidence quality review and process optimization.
• Strong ability to coordinate audit readiness independently.
• Capability to evaluate remediation plans and track SLA adherence.

Preferred Qualifications

• CISA, CISM, CCSK, CISSP, GIAC, Cloud-related certifications (Google Cloud, Microsoft Azure) preferred.

What would be nice for you to have

• Advanced analytical and data reporting abilities.
• Ability to research and resolve questions in a timely manner.
• Strong communication, decision-making, and project management skills.
• Ability to maintain confidentiality when working with confidential materials and employee information.
• Ability to interpret control requirements and guide business partners.

Pay

This is a remote position, and candidates must live within approximately a 70-mile radius of our office locations in Allen, TX; Louisville, KY; Cedar Falls, IA; Birmingham, AL; Charlotte, NC; Lenexa, KS; Springfield, MO; or Monett, MO.

Schedule

This is a remote position.