Cybersecurity Compliance Analyst

Job Summary

To support compliance evaluations, the remote Cybersecurity Compliance Analyst will manage the compliance evaluation process, enhance issue management, and collaborate with business units to mitigate risks and ensure adherence to security policies.

Key responsibilities

• Support the compliance evaluation process, conducting periodic sample reviews and maintaining documentation
• Enhance the cybersecurity issue and exception management process, ensuring timely remediation and accurate documentation
• Collaborate with cross-functional teams to ensure compliance requests are scoped, documented, and assessed within timelines

Required qualifications

• 3+ years in an IT security, GRC, compliance, or similar role
• Bachelor's degree required
• Solid understanding of core security frameworks (NIST CSF, ISO/IEC 27001/2, CIS Controls, or similar)
• Experience assessing compliance of internal applications with cybersecurity policy
• Experience with ITSM or GRC platforms (e.g., ServiceNow, Jira, Archer, OneTrust) is strongly preferred