Senior Security Analyst - Compliance

• Establishes, implements, and maintains information assurance programs, requirements, and standards based on the analysis of user, policy, regulatory, and resource demands
• Conducts compliance assessments of planned and implemented information systems
• Aligns NIST CSF framework requirements with business company processes to assist company stakeholders with determining appropriate controls, test steps, evidence collection, and documentation of risks associated with gaps to defined controls
• Authors and/or updates standards or documentation to align with company and regulatory guidelines
• Assists in facilitating audit requests by interfacing between control owners and auditors
• Assists with responding to customer security questionnaires
• Advises security administrators on normal and exception-based processing of security authorization requests
• Maintains an awareness of existing and proposed security-standard-setting groups, state and federal legislation and regulations pertaining to information security
• Identifies regulatory changes that will affect information security policy, standards and procedures, and recommends appropriate changes
• Works within the information security governance process to define control recommendations that are both efficient and effective
• Identifies, reports, and resolves security violations

• Bachelor s degree in Business, Computer Science, Finance, or other related business discipline preferred or equivalent work experience.

• 5+ years of experience in technology / IT audit or regulatory compliance role

• Knowledge of information security management frameworks (e.g., NIST CSF, NIST 800-53, HIPAA, COBIT, etc.)
• Ability to understand and articulate security risks, as well as propose solutions and/or mitigate controls
• Familiar with Microsoft suite of security tools such as Purview, Sentinel, Defender and Entra
• Excellent written and verbal communication skills, interpersonal and collaborative skills
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one s network within an organization
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• An ability to effectively influence others to modify their opinions, plans, or behaviors, with an emphasis on collaborating across multiple teams and ensuring program needs are satisfied through interpersonal and trusted communication

• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) or equivalent are highly desirable

• Minimal

• Work in a clean, pleasant, and comfortable office work setting. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable persons with disabilities to perform the essential functions.
• This position is 100% in office.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.