Information Security & Compliance Analyst

Barnhart Crane & Rigging•Memphis, TN

About The Position

The Information Security & Compliance Analyst supports the organization's cybersecurity governance, risk management, and compliance initiatives. This role focuses on ensuring security controls align with business, customer, contractual, and regulatory requirements through risk assessments, control testing, policy management, audit support, and security documentation. The analyst will work closely with IT, business leaders, project teams, customers, and external auditors to assess security risks, validate control effectiveness, maintain compliance obligations, and drive continuous improvement of the organization's information security program. This position requires a strong understanding of cybersecurity principles, excellent communication skills, attention to detail, and the ability to translate security requirements into practical business processes.

Requirements

Strong understanding of cybersecurity principles
Excellent communication skills
Attention to detail
Ability to translate security requirements into practical business processes

Responsibilities

Manage Information Security Governance and Compliance Activities by supporting cybersecurity, compliance, and data privacy initiatives, ensuring alignment with organizational objectives, customer requirements, and applicable regulatory frameworks.
Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories.
Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively.
Support Audit, Compliance, and Security Readiness Activities by coordinating internal and external audits, collecting evidence, responding to customer security assessments, conducting regular cybersecurity tabletop exercises, and tracking corrective actions through remediation.
Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements.
Collaborate with Business and Technical Teams to promote security awareness; develop, maintain, coordinate, and track information security and data privacy training programs; monitor remediation activities; review vendor security practices; and provide reporting on security, risk, compliance, and privacy initiatives to leadership.