It Compliance Analyst (Remote)

The Compliance Analyst is responsible for assisting in the successful completion of SOX/General Computer Controls and PCI including facilitating identification and remediation of any risk and/or compliance findings. Assists in the development and communication of information security awareness training and education. The Compliance Analyst will also contribute to process and policy reviews.

• Conducts and serves as a point of contact for IT-related audits, (PCI, SOX/GCC’s)
• Coordinates security training and communications
• Coordinates with internal and external auditors to provide audit evidence
• Assists with Phishing Tests and other Red Team activities to ensure security controls are working as required.
• Progresses reporting and escalation to audit and compliance stakeholders for internal and external audit actions
• Assists in the creation of security testing processes to ensure compliance with PCI, NIST and Privacy regulations.
• Helps to maintain the master list of compliance risk and incorporates it into the risk register
• Information Security: Facilitates a compliance self-certification process and annual scope reconfirmation
• Security Administration: Monitors requirements for technology controls as they are mapped against NIST and PCI frameworks.
• Coordinates management action plans for remediation of any risk and compliance findings.
• Produces compliance or security reports as needed

Education & Experience:

• Bachelor’s degree in Computer Science or related field or equivalent combination of industry related professional experience, certifications and education
• Working experience with information security and/or audit/compliance initiatives, teams, and programs
• Working experience with SOX/ General Computer Controls, NIST, PCI, and/or other Information Security Management or privacy Frameworks preferred.

Knowledge & Skills

• SOX and/or general computer controls.
• Security Administration: Understanding of IT Best Practices
• PCI
• Adaptable to shifting priorities, demands, and timelines through analytical and problem-solving capabilities
• Proficient in Microsoft Office suite
• Ensure that security records are accurate and complete in alignment with corporate and regulatory requirements
• Ability to develop and maintain positive relationships with IT/Business peers
• Ability to communicate with a broad spectrum of people with varying levels of technical acumen
• Information Security: Understanding of Operating Systems and Networks
• Must be willing to pursue Security and/or Compliance certificates such as CISA, CISM, CRISC, etc.

#IND3