IT Security and Compliance Analyst I – Remote Opportunity
About the position Responsibilities • Support the annual planning of the company's Information Security compliance efforts • Work with Internal Audit to communicate results of ITGC and potentially operational audits and lead mitigation efforts • Review the organization's security risk profile, partnering with IT teams to assess, build mitigation plans and update risk register • Support ITGC, PCI DSS, SOX, SOC2, and COBIT5 control testing, including communicating results in a timely and collaborative manner • Coordinate with Business Process Owners to ensure documentation, testing, remediation, and appropriate controls associated with financial reporting are identified and documented • Coordinate evidence requests with internal and external auditors resulting from audits of the company's internal controls over financial reporting • Prepare reports to key partners and senior management on the status of compliance efforts • Design effective control test plans using knowledge and judgment • Build, update, and manage Standard Operating Procedures (SOP), and IT Policies as needed • Handle RFP's (Requests for Proposal), and Third-Party Questionnaire requests Requirements • Bachelor's degree or equivalent experience in Information Science or related field • Knowledge of ISO27001, NIST, SOC or other security frameworks • Curiosity about IT Security, IT Audit or Governance, Risk and Compliance (GRC) roles • Familiarity with Information Technologies to translate and interpret controls, testing and results • Success in working multi-functionally with diverse teams • Excellent written and oral communication skills with high attention to detail • Ability to proactively make recommendations on next steps • Outstanding organizational skills • Ability to work optimally under pressure and tight deadlines • Ability to build and develop strong working relationships • Proficient digital literacy with extensive knowledge of Microsoft applications (Word, Excel, PowerPoint, Access, Outlook) Nice-to-haves • Experience with security audits • Familiarity with IT General Controls, COBIT5, ISO, CIS or NIST Benefits • Dental insurance • Employee assistance program • Health insurance • Unlimited paid time off • Vision insurance Apply tot his job