Senior Security Compliance Analyst

About the Role

Develops, monitors, maintains and improves the enterprise security program. Assists in the compliance of enterprise security initiatives and creates reports that will impact decisions made at both the executive and Board levels. Mature and automate processes, where possible, to manage security risk.

Responsibilities

• Maintain awareness of existing and proposed enterprise security policies and standards.
• Provide support in security policy and standard development.
• Identify regulatory changes that will affect information security policies, standards and procedures, and recommends appropriate changes.
• Support security control owners with control design and implementation.
• Lead the design, evaluation and oversight of controls for key security and security IT projects, programs, applications and systems, e.g. the Enterprise Control Framework.
• Partner to ensure appropriate corrective actions for data security incidents.
• Partner with Information Security, Business Continuity, Vendor Management, Information Technology, Risk Management, Audit, and Privacy Officer to ensure appropriate follow up and closure of findings and issues are completed.
• Perform assigned tasks within the GRC tool within the defined SLAs.
• Perform related duties as assigned or requested, including security metrics reporting and information security process improvements.

Requirements

• Bachelor’s degree in Information Security, related field, or equivalent experience required.
• 4+ years of experience with security domains required.
• Knowledge of NIST 800-53, HITRUST, and ISO 27001 required.

Qualifications

• CISA, CGEIT, CRISC or CISM required.
• CISSP preferred.

Pay

Pay Range: $87,700.00 - $157,800.00 per year. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives.

Benefits

• Competitive pay
• Health insurance
• 401K and stock purchase plans
• Tuition reimbursement
• Paid time off plus holidays
• Flexible approach to work with remote, hybrid, field or office work schedules

Benefits may be subject to program eligibility.