Analyst, Information Security GRC

Option Care Enterprises • Bannockburn, IL

128d • $62,386 - $103,999

About The Position

The Security Analyst is an information security role focused on supporting IT policies, processes, oversight, and response related to corporate wide regulatory and contractual obligations. The Analyst will also be responsible for supporting Option Care Health Sarbanes-Oxley (SOX) technical and other regulatory requirements such as SOC 2 and requests provided by Option Care Health internal and external auditors. Other critical support areas include Security Awareness and Training, Third Party Risk, and Information Security Risk Management. The Security Analyst will also support Option Care Health access management program, ensuring that users have appropriate access to key applications, based upon their roles.

Requirements

• Bachelor's degree and at least 1-2 years' experience in Information Security field and/or IDAM or business analyst position.
• Experience with data analysis and analytics, including metrics development.
• Demonstrates initiative, able to work independently with minimal supervision yet can work well in a team environment and is customer focused.
• Exceptional MS Excel Skills.
• Experience with audits and audit reviews.
• Background and experience with Information Security Governance, Risk and/or Compliance programs.
• Excellent verbal and written communication skills to collect, analyze and present data.
• Excellent data analysis, reporting and problem-solving skills.

Nice To Haves

• Bachelor's degree in Information Security, Computer Science, Analytics, Education, English, Law or related field.
• Knowledge of Access management & maintaining access management.
• Information Security Certification.
• Understanding of SOC 2; experience working and/or leading SOC evidence collection.
• Understanding of Sarbanes-Oxley; experience working with External and Internal Auditors.
• Knowledge and experience with risk management.

Responsibilities

• Responsible for supporting the corporate-wide IT compliance with regulations and certifications, such as Sarbanes-Oxley (Sox), SOC 2, Payment Card Industry and others.
• Work with the business and internal/external auditors to ensure accurate and timely completion of IT SOX testing plan and other requests.
• Responsible for supporting Security Awareness and Training initiatives.
• Responsible for supporting the Third Party Risk Management and Information Security risk management processes.
• Responsible for enhancing enterprise-wide access management policy, standards, process and audit to ensure compliance with all national standards and regulations.
• Responsible for enhancing of all access management; confirming proper access roles for key systems on a quarterly basis across the enterprise.
• Prepares, collects and analyzes Information Security metrics related materials and documentation in conjunction with numerous InfoSec projects and day-to-day operations as well as SOX Compliance.
• Responsible for any IT or Information Security tasks assigned in support of overarching infosec governance, risk and compliance.

Benefits

• Medical, Dental, & Vision Insurance
• Paid Time off
• Bonding Time Off
• 401K Retirement Savings Plan with Company Match
• HSA Company Match
• Flexible Spending Accounts
• Tuition Reimbursement
• myFlexPay
• Family Support
• Mental Health Services
• Company Paid Life Insurance
• Award/Recognition Programs

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Ambulatory Health Care Services
• Education Level: Bachelor's degree