Lead Security Compliance Analyst

This is a fully remote position, open to applicants in Arizona, +7 more states.

📋 Description

• Oversee projects aimed at developing, monitoring, maintaining, enhancing, and automating enterprise security processes.

• Minimize overall enterprise security risks.

• Generate reports that influence executive and Board-level decisions.

• Manage projects involving requirements gathering, initiation, planning, execution, status reporting, and closure.

• Enhance and automate processes for managing security risks.

• Assist in the development of security policies and standards.

• Identify regulatory changes that impact information security policies, standards, and procedures, and propose necessary modifications.

• Provide support to security control owners regarding control design and implementation.

• Direct the design, assessment, and oversight of controls for essential security and security IT projects, programs, applications, and systems.

• Supervise remediation lifecycle activities, including tracking timelines, developing action plans, reviewing evidence artifacts, providing feedback, and documenting closures.

• Execute assigned tasks within the GRC tool while adhering to defined SLAs.

• Mentor other team members.

• Prepare compliance documentation and reports for senior management, the team, and the Board.

• Manage complex projects to ensure they are completed on time and within budget, escalate issues, and provide weekly progress updates.

• Establish and implement best practices for collecting, reporting, and representing security KPIs and KRIs.

• Conduct security metrics reporting and drive improvements in information security processes.

⛳️ Requirements

• Must have authorization to work in the U.S. without requiring employment-based visa sponsorship now or in the future.

• A Bachelor’s degree in Information Security, a related field, or equivalent experience is required.

• At least 6 years of experience in security domains is required.

• Familiarity with NIST 800-53, HITRUST, and ISO 27001 is essential.

• Certification such as CISA, CGEIT, CRISC, or CISM is required.

• CISSP certification is preferred.

🏝️ Benefits

• Competitive salary.

• Health insurance.

• 401K plan.

• Stock purchase options.

• Tuition reimbursement.

• Paid time off in addition to holidays.

• Flexible work arrangements, including remote, hybrid, field, or office schedules.

• Additional forms of incentives may be included in total compensation.