Information Security – Compliance Support Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate information risk, monitor vulnerabilities, and facilitate the remediation of vulnerabilities across Corporate IT.

• Oversee and manage risk remediation efforts while tracking risk mitigation progress.

• Maintain the risk register, generate reports and documentation, and communicate findings effectively.

• Create recommendations for corrective actions.

• Conduct vulnerability assessments utilizing IT security tools and methodologies.

• Evaluate the IT security/risk posture within IT networks, systems, and software applications.

• Identify and implement IT security tools that support the proposed strategy.

• Recognize opportunities to minimize risk and document remediation options regarding the acceptance or mitigation of risk scenarios.

• Facilitate and support IT audits, IT risk assessments, and regulatory compliance activities.

• Assist in addressing inquiries from internal and external audits and examinations as needed by Compliance.

• Suggest policies, procedures, and standards that align with policy and regulatory requirements.

• Act as project manager/lead for IT security initiatives, collaborating with both technical and business teams.

• Promote awareness of regulatory standards, upstream risks, and industry best practices.

• Analyze technical strategies to meet compliance requirements and enhance processes.

• Work in collaboration with the corporate Information Security and Compliance team to ensure alignment of IT with corporate standards and policies.

⛳️ Requirements

• A Bachelor's Degree in Computer Science, Computer Engineering, or Information Systems; security certifications may substitute for a degree.

• A minimum of 2 years of IT security experience with a proven capability to engage with IT, business, and corporate compliance teams.

• Experience in managing IT security controls within an organization.

• Background in conducting IT compliance assessments.

• Familiarity with technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.

• Project management competencies.

• Experience in Windows workstation and server administration.

• Understanding of data risk management frameworks and compliance practices.

• Strong analytical thinking and assessment abilities.

• Capability to effectively collaborate and coordinate with technical and business teams.

• Creative and effective problem-solving and troubleshooting skills.

• Strong written and verbal communication skills, with the ability to prepare reports and documentation, as well as deliver presentations to team leaders and colleagues.

• Security+, GISF, SSCP, or equivalent certifications are preferred.

🏝️ Benefits

• 401(k) Plan with a 35% employer match per dollar up to a 10% employee contribution.

• Medical Coverage with three platforms: UnitedHealthcare, Reference Based Pricing (including member advocacy), and Kaiser.

• RX Home Delivery.

• Health Savings Account (HSA) with employer contribution.

• In-vitro Fertility treatment coverage.

• Dental coverage.

• Vision insurance with two plans: 12-month and 24-month frames allowance.

• Flexible Spending Account (FSA) Plans (Healthcare, Dependent Care, and Limited Purpose).

• Pre-tax Commuter Plans.

• Employer-paid Life Insurance.

• Employer-paid Short Term Disability.

• Long Term Disability options (Employer-paid or optional Self-paid plans).

• Paid Parental Leave (4 weeks at 100% pay).

• Employee Assistance Plan.

• Voluntary Life Insurance for team members, spouses, and children.

• Voluntary Accidental Death coverage for team members and spouses.

• Legal and ID Theft protection plans.

• TeleHealth services.

• Wellness program via Omada Health (a healthy living solution).

• Travel Assistance services.

• Business Travel Accident coverage.

• Medical coverage for foreign travel.

• Employer-paid Pet Telehealth services.

• Accident Insurance.

• Critical Illness Insurance.

• Hospital Indemnity Insurance.

• Volunteer Time Off.

• 10 holidays per year.

• Summer Sizzle program.

• On Demand Pay (Daily Pay) option.