Information Security Analyst I

Job Description

Compliance analysts coordinate the operations within companies and organizations to ensure they follow local, federal, and state government regulations. As the gatekeeper of compliance both inside and outside the company, they work to ensure that the activities at their employer adhere to the guidelines established by either the government or nonprofit entities that regulate them. They ensure that all policies and procedures are implemented and well-documented and perform internal reviews to identify compliance problems that call for further or formal attention. They are responsible for the implementation and auditing of risk management strategies at the organization to identify and mitigate non-compliance, and they are fluent in industry compliance regulations and policies and stay in contact with compliance regulators.

• Maintain strong working relationships with technology and business teams.
• Coordinate external auditor requests and facilitate meetings with IT and Security teams and controls owners.
• Conduct detailed control reviews for IT applications, infrastructure reviews, change management and product releases,
• Conduct policy and procedure reviews and map them to internal controls.
• Facilitate efficient communication across all levels of an audit to ensure consistency in reaching the audit's goals, and to help in the recognition of any potential opportunities, risks, or complications.
• Drive appropriate meeting cadence required to achieve and maintain for a successful audit.
• Manage compliance and regulatory requests, including all market conduct requests.
• Resolve issues and concerns from external and internal clients/auditors.
• Maintain and update assigned compliance program and risk assessments.
• Monitor regulatory changes as they relate to the program.
• Conduct appropriate follow-up with those audited to resolve audit findings.
• Assist with the development of information security policies, standards and procedures.
• Support legal department in researching and resolving compliance challenges, questions, or complaints.
• Collaborate on changes to internal and regulatory policies as well oversight for compliance monitoring and testing.
• Kick-offs, status reviews, stakeholder meetings, change controls, tollgates, etc.
• Plan and coordinate delivery and dependencies across multiple teams.

Job Requirements

Experience Education:

• Generally, a bachelor's degree in computer science or a related field and relevant work experience in infosec positions. 1 to 3 years of experience.
• Technical skills: Proficiency in various programming languages, networking protocols, and security tools is essential for most infosec roles.
• Familiarity with compliance frameworks SOC, ISO, NIST.

Essential Functions/Working Conditions

1. Communication skills: must be able to communicate effectively with both technical and non-technical personnel.
2. Sitting for long periods in front of a computer, working in confined spaces or lifting and moving computer equipment.
3. Working environment: Include corporate offices, data centers, and remote locations.
4. Stress: with high-pressure situations such as security breaches, attacks, and threats.
5. Continuous learning: Infosec is a constantly evolving field, and staying up-to-date with the latest trends, threats, and technologies is crucial. Therefore, continuous learning and professional development are essential requirements for an infosec job.