Info Compliance Analyst/Sr Info Compliance Analyst

BHE•Omaha, NE

1d•$88,800 - $127,500

About The Position

This is a multi-level Information Compliance Analyst/Senior Information Compliance Analyst position supporting information security systems and programs for one or more BHE US affiliates. The role supports implementation and maintenance of systems for ISO 27001 and ISO 27019 certification, information security policy and procedure change management, and related IT controls. It manages cybersecurity continuous-improvement activities, performs risk assessments, and coordinates remediation of risk-mitigation actions. The analyst researches, analyzes, develops, and implements strategies, programs, and processes in response to changing internal and external conditions. The role also supports the Information Security Management System (ISMS), coordinates cybersecurity audits and control evidence, advises management and teams on information-security requirements, and contributes to incident response, business continuity, risk management, and forensic investigations. Travel to audit-related site locations is required, typically for up to one week at a time and potentially 10% to 25% of the work schedule.

Requirements

Bachelor’s degree in information systems, computer science, accounting, finance, business, or a related technical field, or equivalent work experience.
For candidates without a bachelor’s degree, typically four years of related progressive work experience is needed, including a minimum of four years of directly related technical experience in audit, finance, accounting, or information-security program compliance support.
For the Senior Information Compliance Analyst level, eight years of progressively advanced technical experience in information security, accounting, or audit.
Ability and willingness to travel for pre-audit inspections and to support external auditors at site locations; travel is typically up to one week at a time and may account for 10% to 25% of the work schedule.
Demonstrated knowledge of information-security best practices, evidenced by achievement or pursuit of one or more advanced certifications such as CISM or CISSP.
Deep technical knowledge of operating systems, databases, networks, and disaster recovery practices.
Excellent oral and written communication skills, including presentation skills.
Ability to recognize, respond to, escalate, and manage complex technical problems.
Effective interpersonal and customer relationship skills.
Effective analytical, problem-solving, and decision-making skills.
Ability to prioritize and handle multiple enterprise-level assignments.
Availability after business hours to guide, manage, and support on-call staff in escalation situations.

Responsibilities

Identify, prescribe, and implement cybersecurity initiatives supporting ISO 27001 and ISO 27019 controls for the pipeline group, and advocate for the programs.
Support development and maintenance of the Information Security Management System (ISMS) for one or more BHE US affiliates.
Support or lead special projects, studies, and analyses; develop alternatives; present recommendations to management; and influence management decisions.
Research, analyze, develop, and implement strategies, programs, and processes in response to changing internal and external conditions.
Support development and maintenance of information security policies, procedures, standards, controls, and related documents.
Coordinate and lead interactions with internal and external cybersecurity auditors.
Execute control activities to provide evidence of compliance with IT controls.
Lead cybersecurity maintenance and continuous-improvement activities identified through internal processes or cybersecurity-related audits.
Support development and documentation of BHE US affiliate third-party services and service levels for ISO 27001 and ISO 27019 scoping.
Advise management, teams, and individuals on strategic and tactical direction concerning enterprise information-security requirements, policies, procedures, and standards.
Coordinate updates to training materials supporting information-security policies and procedures.
Oversee and coordinate efforts to assess and mitigate cybersecurity risks and threats.
Coordinate with BHE IT, information-security staff, and BHE chief security officer staff to share best practices and cybersecurity initiatives.
Support information-security key performance indicator and status reporting.
Support business continuity planning and cybersecurity incident response and management; coordinate creation and updates of incident response plans.
Support the enterprise as an information-security subject matter expert.
Manage and coordinate forensic and investigation activities.
Perform other duties as assigned.