Security & Compliance Analyst
About The Position
SECURITY & COMPLIANCE ANALYST JOB SUMMARY: We are looking for an Security and Compliance Analyst who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices. Reports to the IT Manager. PRIMARY RESPONSIBILITIES: Some of your main responsibilities will includeassisting in the development and improvement of organizational security and compliance procedures, conducting risk assessments and audits to establish the effectiveness of our current security systems, and minimizing the impact of potential security breaches and incidents. Assist in thereview and update of our current information security and privacy policies. Support the creation, documentation, and implementation of security and compliance policies and procedures.Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security-log reviews. (Pen Testing, etc) Conduct assessments and audits to measure the efficiency of our compliance and security systems. Prepare reports and escalate findings to senior staff for review. Evaluate and assist in documenting disaster recovery programs and support testing efforts in cases of security incidents and breaches. Provide analysis and recommendations to the IT Manager regarding security risks and mitigation strategies.Keep up to date with external security and compliance regulations and data privacy and security best practices and assist with updates to internal policies and procedures as directed. Assist in preparing materials for internal training sessions about the latest information security and compliance policy updates. Collaborating with vendors to Support data-handling reviews and maintain documentation related to vendor compliance. Reporting security breaches to management for prompt resolution and assist in incident documentation, tracking and follow-up actions.
Requirements
- Bachelor’s degree in an information technology or related field.
- 1-3 years of experience in a security, compliance, IT auditing, or cybersecurity role.
- Strong understanding of information security and privacy standards and best practices related to securing data and confidentiality.
- Working knowledge of industry-relevant data security and compliance regulations.
- Excellent analytical, data visualization, and communication skills.
Nice To Haves
- A CISSP certification or pursuit of security-related certifications (Security+, CISA, CISSP Associate) is a plus.
- Experience in IT auditing or risk assessment.
Responsibilities
- Assisting in the development and improvement of organizational security and compliance procedures
- Conducting risk assessments and audits to establish the effectiveness of our current security systems
- Minimizing the impact of potential security breaches and incidents
- Assist in thereview and update of our current information security and privacy policies
- Support the creation, documentation, and implementation of security and compliance policies and procedures.
- Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security-log reviews. (Pen Testing, etc)
- Conduct assessments and audits to measure the efficiency of our compliance and security systems.
- Prepare reports and escalate findings to senior staff for review.
- Evaluate and assist in documenting disaster recovery programs and support testing efforts in cases of security incidents and breaches.
- Provide analysis and recommendations to the IT Manager regarding security risks and mitigation strategies.
- Keep up to date with external security and compliance regulations and data privacy and security best practices and assist with updates to internal policies and procedures as directed.
- Assist in preparing materials for internal training sessions about the latest information security and compliance policy updates.
- Collaborating with vendors to Support data-handling reviews and maintain documentation related to vendor compliance.
- Reporting security breaches to management for prompt resolution and assist in incident documentation, tracking and follow-up actions.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
