Cybersecurity Compliance Analyst

STERIS•Chicago, IL

1d•Remote

About The Position

As the Cybersecurity Compliance Analyst, you will support and strengthen the organization’s cybersecurity, governance, risk, and compliance initiatives. You will play a critical part in representing STERIS Digital Workflow Solutions systems, infrastructure, cloud environments, client data, and operational integrity while supporting compliance with frameworks such as NIST, SOC 2, FedRAMP, related security standards, and ensuring systems meet customer security and regulatory requirements. You will collaborate closely with the Legal, Compliance, Leadership, and all Development teams to monitor security posture, audit readiness, manage risk-related activities, coordinate compliance initiatives, and respond to Customer technical & security questionnaires. The position requires a blend of technical understanding, analytical thinking, documentation management, and communication skills. This is a fully remote role with preference for qualified candidates living in Eastern and Central time zones.

Requirements

Bachelor’s degree in: Cybersecurity, Information Technology, Computer Science, Or related field
2+ years experience in the following: Networking basics (TCP/IP, DNS, firewalls)
Operating systems (Windows & Linux)
Basic scripting (Python, PowerShell, or Bash)
Threats & vulnerabilities
Risk management principles
Identity and access management (IAM)
Encryption basics
Experience with SIEM tools (e.g., Splunk, QRadar), Antivirus/endpoint protection, Vulnerability scanners (e.g., Nessus)

Nice To Haves

Hands-on labs (TryHackMe, Hack The Box)
Knowledge of cloud security (AWS/Azure basics)
Familiarity with compliance frameworks (NIST, ISO 27001)
CompTIA Security+ preferred

Responsibilities

Maintain strong operational alignment with security and compliance frameworks including NIST, SOC 2, and FedRAMP.
Ensure audit preparation activities, evidence collection, and compliance reporting are completed accurately and on schedule.
Improve and maintain vendor risk management and third-party security review processes.
Maintain accurate security documentation, procedures, questionnaires, and internal records.
Support the company’s long-term cybersecurity maturity goals and compliance initiatives.
Collect, organize, validate, and maintain evidence required for audits, assessments, and security reviews.