Information Security Compliance Analyst

Job Summary

A company is looking for an Information Security Compliance Analyst.

Key Responsibilities:

• Coordinate and organize evidence for external and internal audits, manage control and process libraries, and assist in implementing security controls
• Assess, evaluate, and make recommendations for security control implementation aligned with SOC 2 Type 2 and the company's Risk Management program
• Support audit engagements, participate in audits, gather control evidence, and assist with remediation efforts

Required Qualifications:

• Bachelor's degree in Information Security or a Technical field, or a non-technical degree with relevant work experience
• 3+ years' experience in audit settings (HiTrust, SOC2) and knowledge of information security risk, governance, control frameworks, and regulatory requirements
• 2+ years of direct, in-house security compliance experience
• Experience presenting security audit results to senior leadership
• Professional certifications such as CISA, CISM, CISSP, etc. are preferred