Security Analyst - IT Compliance

About the position Job Responsibilities: IT/ISO Risk Management

• Maintain and execute risk management processes that align with ISO, NIST, and regulatory standards.
• Enforce and evaluate system access controls to ensure alignment with internal policies.
• Support security planning, assessments, gap analysis, and compliance activities.
• Analyze business processes for security alignment and identify control weaknesses.
• Escalate and report on residual risk, vulnerabilities, and non compliance trends.

Risk Register Management

• Own the IT/ISO risk register, ensuring risks are captured, assessed, updated, and communicated.
• Partner with IT and ISO process leaders to continually evaluate risk impact and mitigation progress.

Compliance & Audit Support

• Coordinate internal and external audits (ISO, NIST, SOC2, SOX, etc.).
• Prepare evidence, respond to audit requests, and track findings through remediation.
• Monitor compliance with IT/ISO policies, documenting deviations and improvement opportunities.

Remediation Oversight

• Work with application owners, infrastructure teams, and other technical SMEs to design and track remediation plans.
• Ensure remediation timelines are met and resolutions are complete, accurate, and aligned with control intent.
• Provide progress reporting to management and leadership.

Collaboration & Communication

• Partner across IT, security, and business teams to drive visibility and accountability around risk and compliance.
• Lead periodic discussions with stakeholders to promote a consistent risk management culture.

Training & Awareness

• Provide training and support to teams on IT/ISO compliance processes.
• Serve as a point of contact for compliance and audit related inquiries.

Day to Day Duties

• Perform ITGC testing, evidence review, and control validation for SOX/SOC2 readiness.
• Review and update risk register entries, ensuring accuracy and timely progress updates.
• Investigate compliance issues, perform root cause analysis, and document findings.
• Support access control reviews and ensure entitlement processes align with policy.
• Collaborate with auditors, gather evidence, and document remediation activities.
• Draft or update security policies, standards, and procedures.
• Monitor compliance dashboards, generate weekly/monthly reporting, and communicate status to leadership.
• Participate in cross functional meetings with process owners and contribute to risk reduction strategies.
• Respond to security incidents or alerts when they intersect with compliance and risk.

Responsibilities

• Maintain and execute risk management processes that align with ISO, NIST, and regulatory standards.
• Enforce and evaluate system access controls to ensure alignment with internal policies.
• Support security planning, assessments, gap analysis, and compliance activities.
• Analyze business processes for security alignment and identify control weaknesses.
• Escalate and report on residual risk, vulnerabilities, and non compliance trends.
• Own the IT/ISO risk register, ensuring risks are captured, assessed, updated, and communicated.
• Partner with IT and ISO process leaders to continually evaluate risk impact and mitigation progress.
• Coordinate internal and external audits (ISO, NIST, SOC2, SOX, etc.).
• Prepare evidence, respond to audit requests, and track findings through remediation.
• Monitor compliance with IT/ISO policies, documenting deviations and improvement opportunities.
• Work with application owners, infrastructure teams, and other technical SMEs to design and track remediation plans.
• Ensure remediation timelines are met and resolutions are complete, accurate, and aligned with control intent.
• Provide progress reporting to management and leadership.
• Partner across IT, security, and business teams to drive visibility and accountability around risk and compliance.
• Lead periodic discussions with stakeholders to promote a consistent risk management culture.
• Provide training and support to teams on IT/ISO compliance processes.
• Serve as a point of contact for compliance and audit related inquiries.
• Perform ITGC testing, evidence review, and control validation for SOX/SOC2 readiness.
• Review and update risk register entries, ensuring accuracy and timely progress updates.
• Investigate compliance issues, perform root cause analysis, and document findings.
• Support access control reviews and ensure entitlement processes align with policy.
• Collaborate with auditors, gather evidence, and document remediation activities.
• Draft or update security policies, standards, and procedures.
• Monitor compliance dashboards, generate weekly/monthly reporting, and communicate status to leadership.
• Participate in cross functional meetings with process owners and contribute to risk reduction strategies.
• Respond to security incidents or alerts when they intersect with compliance and risk.

Benefits

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Apply tot his job Apply To this Job