IT Security and Compliance Analyst I - Remote Opportunity
About the position
Responsibilities
• Support the annual planning of the company's Information Security compliance efforts
• Work with Internal Audit to communicate results of ITGC and potentially operational audits and lead mitigation efforts
• Review the organization's security risk profile, partnering with IT teams to assess, build mitigation plans and update risk register
• Support ITGC, PCI DSS, SOX, SOC2, and COBIT5 control testing, including communicating results in a timely and collaborative manner
• Coordinate with Business Process Owners to ensure documentation, testing, remediation, and appropriate controls associated with financial reporting are identified and documented
• Coordinate evidence requests with internal and external auditors resulting from audits of the company's internal controls over financial reporting
• Prepare reports to key partners and senior management on the status of compliance efforts
• Design effective control test plans using knowledge and judgment
• Build, update, and manage Standard Operating Procedures (SOP), and IT Policies as needed
• Handle RFP's (Requests for Proposal), and Third-Party Questionnaire requests
Requirements
• Bachelor's degree or equivalent experience in Information Science or related field
• Knowledge of ISO27001, NIST, SOC or other security frameworks
• Curiosity about IT Security, IT Audit or Governance, Risk and Compliance (GRC) roles
• Familiarity with Information Technologies to translate and interpret controls, testing and results
• Success in working multi-functionally with diverse teams
• Excellent written and oral communication skills with high attention to detail
• Ability to proactively make recommendations on next steps
• Outstanding organizational skills
• Ability to work optimally under pressure and tight deadlines
• Ability to build and develop strong working relationships
• Proficient digital literacy with extensive knowledge of Microsoft applications (Word, Excel, PowerPoint, Access, Outlook)
Nice-to-haves
• Experience with security audits
• Familiarity with IT General Controls, COBIT5, ISO, CIS or NIST
Benefits
• Dental insurance
• Employee assistance program
• Health insurance
• Unlimited paid time off
• Vision insurance
Apply tot his job
Apply To this Job