Security Compliance Analyst

Job Profile Summary:

• The Security Compliance Analyst performs work tied to affiliation compliance assurance planning and execution. This position engages in the implementation of policies and procedures meant to ensure compliance with applicable laws, regulations, and standards.

Job Description :

• General Office Worker, Semi-Active, Campus Travel - Someone who normally works in an office setting or remotely, periodically has lifting and carrying requirements up to 40 lbs and routinely travels for work within walking distance of location of primary work assignment as essential functions of the job.

EDUCATION:

• Bachelor's degree in Computer Science, Business, or other related field. In lieu of degree, five (5) years' compliance, regulatory, legal, information technology security or equivalent experience will be considered.

EXPERIENCE:

• Minimum three (3) years' related experience in any combination of the following areas: compliance, regulatory, legal, and information technology security.
• Previous experience conducting various system audits and working with external vendors, conducting information security risk assessments and/or experience related to information security, business continuity, and disaster recovery preferred.
• Previous experience with ServiceNow.
• Knowledgeable of common information security management frameworks (HIPAA, HITRUST, etc.) preferred.
• Familiarity with IT compliance programs and processes.
• Knowledgeable of laws and/or regulations in the area of compliance.

LICENSING/CERTIFICATION:

• Professional security management certification (Certified Information Systems Security Professional (CISSP)) or other similar credentials desired.

Responsibilities:

• Tracks and interprets laws or regulations impacting business, and offers suggestions to functional managers seeking to ensure compliance.
• Security and Risk Management: Provides guidance to business partners for all information security-related issues and identified security risks. Creates, manages, and enforces information security policy.
• Provides oversight of framework compliance.
• Manages enterprise audit remediation and CAP management.
• Manages vulnerability management plan. Conducts anti-phishing campaigns.
• Conducts and manages the security awareness and training program.
• Manages the third party risk management program. (what parts of this paragraph from Information Security Analyst (role level) are applicable? Yes
• Researches, analyzes, interprets, and monitors files to determine, demonstrate and maintain adequacy in compliance with regulations and implemented Company programs (HiTrust, ServiceNow, etc.)
• Conducts initial reviews of alleged compliance violations and escalates to leadership as needed. (s this your area or Kevin's?)
• Works collaboratively offering guidance as it pertains to audits, updates and/or changes to content, rules, policy and/or regulations.
• Analyzes, documents, compiles and distributes resources to impacted departments and/or customers.
• Performs other duties as requested.