Senior IT Compliance Analyst

Ascend Learning, LLC•Leawood, OR

2d•Hybrid

About The Position

The Senior IT Compliance Analyst contributes to achievement of P&L objectives for the business through providing a single point of accountability for IT compliance initiatives within Technology & Operations. This position is responsible for maintaining highly collaborative partnerships with Legal and Technology teams, while developing and implementing compliance programs designed to ensure that company data is protected and compliance program requirements are met for our Healthcare brands. Ascend Learning IT compliance programs ensure adherence to all legal requirements, HIPAA, FERPA, GDPR, Privacy Shield, and security best practices.

Requirements

High school diploma or GED required.
5+ years of professional, industry-related experience in IT compliance/security roles
5+ years’ experience in developing, implementing, and auditing Security & Compliance policies and controls
3+ years’ experience completing security questionnaires
Demonstrated subject matter expertise in HIPAA assessments and international compliance requirements
Strong understanding of cybersecurity best practices, risks, and mitigations is required
Strong logical, analytical, critical thinking, and problem-solving skills
Highly motivated, driven, proven ability to facilitate the resolution of compliance and security gaps
Excellent interpersonal skills as well as strong verbal and written communication skills; comfortable working with and presenting to colleagues, business partners, or technology leaders
Proactive attitude towards anticipating problems, implementing solutions, and accomplishing goals
Willingness to work in cross-functional teams and a desire to explore new approaches and ideas with enthusiasm

Nice To Haves

Bachelor's degree in Information Security, Information Systems, Information Technology, Computer Science, Engineering, or equivalent work experience preferred.

Responsibilities

Collaborate with the IT Compliance Manager, Technology & Operations associates, Legal, and HR to align technical and compliance requirements to meet objectives.
Provide expert guidance and recommendations for HIPAA privacy and security rules and other applicable federal and state health care privacy laws.
Lead and facilitate third party audit projects for HIPAA and GDPR. Will be solely responsible for audit project, reporting, assessment, evidence collection and validation.
Contribute to internal and third-party audits such as SOC 2 and CIS assessments as requested.
Work directly with business units and technology partners to convey and drive compliance initiatives.
Perform compliance and security reviews of customer contracts and complete security questionnaires as required.
Assist and coordinate with the Legal team to ensure consistent strategy and implementation of IT compliance requirements.
Provide support during acquisitions and all other IT compliance initiatives as needed.