Sr. Compliance Analyst

PTS Advance•Brentwood, TN

19h

About The Position

The Senior Cybersecurity Compliance Analyst is responsible for translating cybersecurity regulatory, legal, and industry framework requirements into actionable compliance plans that reduce organizational risk and support regulatory obligations. This role serves as a bridge between regulatory requirements and operational implementation by performing gap assessments, developing remediation roadmaps, coordinating compliance activities, and validating the effectiveness of cybersecurity controls. The ideal candidate possesses strong analytical skills, a deep understanding of cybersecurity and compliance frameworks, and the ability to collaborate across business, IT, legal, and operational teams to achieve and maintain compliance.

Requirements

Bachelor's degree in business administration, Information Security, Risk Management, compliance, or a related field
3-5+ years of experience in compliance, risk management, privacy, cybersecurity GRC or related corporate governance functions.
Experience conducting cybersecurity assessments and gap analyses
Experience translating regulations into actionable plans
Hands-on experience building and executing programs.
Proven ability to prepare executive-level reports and presentations for governance forums.
Strong understanding of cybersecurity compliance program elements
Advanced data analysis and reporting skills; proficiency with Power BI, Excel, and data visualization best practices.
Excellent written and verbal communication skills with the ability to translate complex information into clear, executive-ready insights.
Exceptional attention to detail, documentation discipline, and process orientation.
Ability to manage multiple priorities with minimal supervision and deliver on deadlines in a dynamic environment.
Collaborative mindset with strong stakeholder management across Legal, HR, Internal Audit, Procurement, and business teams.
Sound judgment, discretion, and integrity when handling sensitive information.

Nice To Haves

Knowledge of cybersecurity regulations and frameworks such as: NIST Cybersecurity Framework, NIST 800-171, CIS Controls, Data Processing Agreement, Texas Data Privacy and Security Act, Martine Transportation Security Act (MTSA)
Professional certifications are a plus

Responsibilities

Support day-to-day administration and continuous improvement of the Cybersecurity Compliance program, aligning activities to program objectives and risk priorities.
Interpret and analyze cybersecurity related laws, regulations, standards (MTSA, TSA, etc.)
Interpret and analyze privacy laws and regulations associated to Delek (DPA, Texas Security and Privacy Act)
Translate requirements into compliance controls, tasks, and implementation plans
Develop compliance roadmap and action plans to address regulatory and framework requirements
Monitor changes in the regulatory landscape and assess organization impact
Provide recommendations for achieving and sustaining compliance with applicable cybersecurity requirements
Conduct cybersecurity compliance assessment against stated requirements
Perform gap analyses to identify deficiencies in processes, controls, documentation and governance practices
Document assessment results and findings
Drive cross-functional collaboration with Legal, HR, Internal Audit, Supply Chain, and business units to ensure effective program execution.
Work closely with SMESs, Information Technology, Operational Technology, Legal, Operations and business stakeholders
Coordinate compliance training initiatives with key stakeholders and SMEs, including assignments, communications, tracking, and reporting.
Develop and maintain recurring compliance dashboards and analytics across policy governance.
Consolidate and analyze program data to identify trends, key risk indicators, policy exceptions, and improvement opportunities; present insights to leadership.
Prepare executive-level reports and presentation materials for Compliance Committee meetings and other governance forums.