Information Security Compliance Analyst

Access•Peabody, MA

17h•Remote

About The Position

Access Corp is seeking a detail-oriented and proactive Information Security Compliance Analyst to support our growing Information Security risk and compliance program. This remote role will be responsible for ensuring adherence to regulatory requirements, internal policies, and industry standards. The ideal candidate will have experience in compliance frameworks, audit support, and risk management within a dynamic, data-driven organization.

Requirements

Bachelor's degree in business, Information Security, or a related field.
3-+_ years of experience in compliance, risk management, or audit roles.
Familiarity with regulatory frameworks and standards (e.g., SOC 2, ISO 27001, HIPAA, GDPR, HITRUST, LGPD).
Strong organizational and communication skills.
Proficiency in English is required.

Nice To Haves

Experience with GRC tools and platforms is a plus.
Relevant certifications (e.g., CISA, CRISC, CIPM, or similar) are a plus.
Proficiency in Spanish and/or Portuguese is preferred.

Responsibilities

Support the implementation and maintenance of compliance programs (e.g., SOC 2, ISO 27001,HIPAA, & GDPR).
Assist in internal and external audits by gathering evidence, tracking findings, and coordinating remediation efforts.
Monitor regulatory changes and assess their impact on business operations.
Conduct periodic risk assessments and control testing to ensure compliance with policies and standards.
Maintain documentation of compliance activities, including policies, procedures, and audit logs.
Collaborate with cross-functional teams to ensure compliance requirements are embedded in business processes.
Help manage third-party risk assessments and vendor compliance reviews.
Promote a culture of compliance and security awareness across the organization.