IS Compliance Analyst II

Nationwide Children's Hospital • Columbus, OH

107d

About The Position

Leads information security compliance activities regarding regulatory, agreement-based, and risk-based requirements. The position involves leading internal teams through compliance activities, including understanding requirements, recommending solutions and alternatives to remediate technical or procedural gaps, and conducting cybersecurity assessments. The role requires collaboration with administrative and technical teams to respond to security assessments from third parties and applying recognized cybersecurity frameworks and standards (e.g., NIST SP 800-53, NIST SP 800-171, NIST Cybersecurity Framework, PCI, HIPAA, HITRUST, etc.) in risk assessments and audits. Documentation of findings, assessment processes, and recommended actions must be clear, concise, and actionable. The position also participates in information security and risk continuous process improvement initiatives and coordinates the development and maintenance of information security policies, standards, and procedures. Staying up-to-date and informed of information security industry changes and trends is essential, as is participation in outside education advancement.

Requirements

• Bachelor's Degree in Computer Science or equivalent education.
• Four years of IT experience.
• Two years of experience in information security or compliance.

Nice To Haves

• Certifications such as GIAC, CISA, CISSP, or equivalent certification.
• Experience in a healthcare, government, or academic research organization.

Responsibilities

• Lead internal teams through compliance activities.
• Understand requirements and recommend solutions to remediate gaps.
• Conduct cybersecurity assessments.
• Collaborate with administrative and technical teams for third-party security assessments.
• Apply cybersecurity frameworks and standards in risk assessments and audits.
• Document findings and recommended actions clearly and concisely.
• Participate in continuous process improvement initiatives.
• Coordinate the development and maintenance of information security policies, standards, and procedures.
• Stay informed of industry changes and trends.
• Participate in outside education advancement.

What This Job Offers

• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees