Security Compliance Analyst (fully remote)

Summary:

This person will provide direct support to the Security Governance, Risk and Compliance service team by assuring IS processes and procedures meet or exceed security compliance requirements.

Responsibilities:

The selected individual must understand technical implementation details necessary to support the design of practical and scalable security controls to mitigate risks. This person also will:

Assist in maintaining the corporate suite of security controls and policies (administrative and technical).
Assist in performing audits using industry standard security methods to help strengthen internal security controls, procedures and policies.
Assist with the development, implementation, and execution of enterprise wide information security training and awareness programs.
Support the development of required corrective action plans relating to security risks and compliance requirements.
Support the implementation and maintenance of technical security controls required to mitigate risks.
Implement security procedures to address compliance requirements.
Support security audits by working with internal tools and infrastructure to ensure effectiveness of control implementations and to produce evidence for external audits.
Support annual risk assessment and business impact analysis.
Participate in team problem solving efforts and offer ideas to solve compliance issues.
Act as a security compliance liaison with technical subject matter experts.
Work with IT Security team in the development and acceptance of IT policies and procedures.
Ensures program standards follow applicable State and Federal regulatory requirements.
Maintains professional and technical knowledge by attending industry workshops, conferences, and participating in personal and professional networks.

Education/Certifications:

BS degree in computer science, computer engineering, or business technology preferred
Preferred certifications: CISSP, CCISO, CISA, CISM, CRISC, CEH

Experience:

1-3 years’ experience in developing information security programs and assessing effectiveness of such programs.
Experience working with Security Incident and Event Management (SIEM) tools, endpoint detection and response tools, vulnerability management suites, and various security solutions.
Experience in working with GRC systems/modules.
Experience in working across enterprises with various teams beyond security (infrastructure/IT, privacy, compliance, finance, etc..)

Skills:

Solid knowledge of security framework and best practices. Knowledge of operating system, application, network, and database security architectures. Solid understanding of network and systems security, system and network configuration, and application security.
Knowledge of controls related to security, skills in creating, developing and improving controls.

DeepSearch Staffing Partners

New Jobs

Security Compliance Analyst (GRC)