Security Analyst - IT Compliance
About the position Job Responsibilities: IT/ISO Risk Management
- Maintain and execute risk management processes that align with ISO, NIST, and regulatory standards.
- Enforce and evaluate system access controls to ensure alignment with internal policies.
- Support security planning, assessments, gap analysis, and compliance activities.
- Analyze business processes for security alignment and identify control weaknesses.
- Escalate and report on residual risk, vulnerabilities, and non compliance trends.
Risk Register Management
- Own the IT/ISO risk register, ensuring risks are captured, assessed, updated, and communicated.
- Partner with IT and ISO process leaders to continually evaluate risk impact and mitigation progress.
Compliance & Audit Support
- Coordinate internal and external audits (ISO, NIST, SOC2, SOX, etc.).
- Prepare evidence, respond to audit requests, and track findings through remediation.
- Monitor compliance with IT/ISO policies, documenting deviations and improvement opportunities.
Remediation Oversight
- Work with application owners, infrastructure teams, and other technical SMEs to design and track remediation plans.
- Ensure remediation timelines are met and resolutions are complete, accurate, and aligned with control intent.
- Provide progress reporting to management and leadership.
Collaboration & Communication
- Partner across IT, security, and business teams to drive visibility and accountability around risk and compliance.
- Lead periodic discussions with stakeholders to promote a consistent risk management culture.
Training & Awareness
- Provide training and support to teams on IT/ISO compliance processes.
- Serve as a point of contact for compliance and audit related inquiries.
Day to Day Duties
- Perform ITGC testing, evidence review, and control validation for SOX/SOC2 readiness.
- Review and update risk register entries, ensuring accuracy and timely progress updates.
- Investigate compliance issues, perform root cause analysis, and document findings.
- Support access control reviews and ensure entitlement processes align with policy.
- Collaborate with auditors, gather evidence, and document remediation activities.
- Draft or update security policies, standards, and procedures.
- Monitor compliance dashboards, generate weekly/monthly reporting, and communicate status to leadership.
- Participate in cross functional meetings with process owners and contribute to risk reduction strategies.
- Respond to security incidents or alerts when they intersect with compliance and risk.
Responsibilities
- Maintain and execute risk management processes that align with ISO, NIST, and regulatory standards.
- Enforce and evaluate system access controls to ensure alignment with internal policies.
- Support security planning, assessments, gap analysis, and compliance activities.
- Analyze business processes for security alignment and identify control weaknesses.
- Escalate and report on residual risk, vulnerabilities, and non compliance trends.
- Own the IT/ISO risk register, ensuring risks are captured, assessed, updated, and communicated.
- Partner with IT and ISO process leaders to continually evaluate risk impact and mitigation progress.
- Coordinate internal and external audits (ISO, NIST, SOC2, SOX, etc.).
- Prepare evidence, respond to audit requests, and track findings through remediation.
- Monitor compliance with IT/ISO policies, documenting deviations and improvement opportunities.
- Work with application owners, infrastructure teams, and other technical SMEs to design and track remediation plans.
- Ensure remediation timelines are met and resolutions are complete, accurate, and aligned with control intent.
- Provide progress reporting to management and leadership.
- Partner across IT, security, and business teams to drive visibility and accountability around risk and compliance.
- Lead periodic discussions with stakeholders to promote a consistent risk management culture.
- Provide training and support to teams on IT/ISO compliance processes.
- Serve as a point of contact for compliance and audit related inquiries.
- Perform ITGC testing, evidence review, and control validation for SOX/SOC2 readiness.
- Review and update risk register entries, ensuring accuracy and timely progress updates.
- Investigate compliance issues, perform root cause analysis, and document findings.
- Support access control reviews and ensure entitlement processes align with policy.
- Collaborate with auditors, gather evidence, and document remediation activities.
- Draft or update security policies, standards, and procedures.
- Monitor compliance dashboards, generate weekly/monthly reporting, and communicate status to leadership.
- Participate in cross functional meetings with process owners and contribute to risk reduction strategies.
- Respond to security incidents or alerts when they intersect with compliance and risk.
Benefits
- Medical, dental & vision
- Critical Illness, Accident, and Hospital
- 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
- Life Insurance (Voluntary Life & AD&D for the employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave)
Apply tot his job Apply To this Job