Job Description
The IT COMPLIANCE ANALYST is an excellent communicator and detail-oriented professional who passionately completes operational tasks relative to a mature Governance & Compliance Program. The Compliance Analyst liaises with internal and external audit in connection with PCI, SOx, FTC, and Data Privacy Law centric activities, reviews evidence, and tests compensating controls.
REPORTS TO: Director, IT Security & Compliance
ESSENTIAL DUTIES AND RESPONSIBILITIES:
*Audit program support (PCI, SOx, ISO2001, CCPA) *Analyze network data flows and architectural documentation for compliance with applicable legal and regulatory compliance mandates. *Reviews quarterly Governance Risk and Compliance Control Evidence *Maintains a current understanding of the regulatory environment *Other duties as assigned
REQUIRED SKILLS AND COMPETENCIES:
*Highly skilled communicator *Open minded and willing to accept directional change *Foundational knowledge of cloud, host, and network administration or auditing *Foundational knowledge of network and host-based security controls, defense in depth, and the cyber kill-chain *Solid understanding of encryption fundamentals and their proper application *Conceptual knowledge of all infrastructure technologies and how data is processed/secured on each *Foundational knowledge of vulnerability and patch management programs *Willingness to broaden skills
QUALIFICATIONS
EXPERIENCE AND EDUCATION:
*3 years of IT-related support experience *One or more of the following industry certifications is preferred: S , CISA, CISSP, GSEC, GSNA, GCCC
Search Results
