Security Compliance Analyst II

This is a fully remote position, open to applicants in Arizona, +7 more states.

📋 Description

• Develop, oversee, and sustain the enterprise security program.

• Assist with the compliance of enterprise security initiatives.

• Stay informed about existing and proposed enterprise security policies and standards.

• Aid in the creation of security policies and standards.

• Assess and supervise controls for significant security and IT security projects, programs, applications, and systems.

• Monitor the policy lifecycle and coordinate reviews, suggested changes, stakeholder feedback, and approvals.

• Execute tasks within the GRC tool according to defined SLAs, including uploading policies, requesting approval, gathering leadership feedback, and processing enhancement requests.

• Monitor, track, follow up on, and resolve findings and remediation plans.

• Collaborate to ensure suitable corrective actions are taken for data security incidents.

• Work alongside Information Security, Business Continuity, Vendor Management, Information Technology, Risk Management, Audit, and Privacy Officer teams to address findings and issues.

• Conduct security metrics reporting and enhance information security processes.

• Perform additional duties as assigned or requested.

⛳️ Requirements

• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

• Bachelor's degree in Information Security, a related field, or equivalent experience is required.

• A minimum of 2 years of experience in security domains is required.

• Proficiency in NIST 800-53 is required.

• Familiarity with HITRUST is required.

• Understanding of ISO 27001 is required.

• CISA, CGEIT, CRISC, CISM, or CISSP certifications are preferred.

🏝️ Benefits

• Health insurance.

• 401K plan.

• Stock purchase plans.

• Tuition reimbursement.

• Paid time off plus holidays.

• Flexible work arrangements including remote, hybrid, field, or office schedules.

• Competitive salary.

• Additional forms of incentives may be included in total compensation.