Information Security & Compliance Analyst

US·Memphismid

OtherSecurity & Compliance Analyst

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Position Summary: The Information Security & Compliance Analyst supports the organization's cybersecurity governance, risk management, and compliance initiatives.

Technical Tools

OtherSecurity & Compliance Analyst

Responsibilities

~1 min read

→Manage Information Security Governance and Compliance Activities by supporting cybersecurity, compliance, and data privacy initiatives, ensuring alignment with organizational objectives, customer requirements, and applicable regulatory frameworks.
→Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories.
→Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively.
→Support Audit, Compliance, and Security Readiness Activities by coordinating internal and external audits, collecting evidence, responding to customer security assessments, conducting regular cybersecurity tabletop exercises, and tracking corrective actions through remediation.
→Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements.
→Collaborate with Business and Technical Teams to promote security awareness; develop, maintain, coordinate, and track information security and data privacy training programs; monitor remediation activities; review vendor security practices; and provide reporting on security, risk, compliance, and privacy initiatives to leadership.

Requirements

~1 min read

3-5 years of experience in information security, cybersecurity compliance, or risk management.
Working knowledge of security technologies, infrastructure, and operational security practices is preferred
Experience supporting cybersecurity frameworks such as NIST 800-171, NIST CSF, ISO 27001, SOC 2, CIS Controls, or CMMC.
Experience conducting tabletop exercises, risk assessments, control reviews, audits, incident management, and remediation tracking activities.
Experience developing and maintaining security policies, procedures, standards, and compliance documentation.
Strong communication and organizational skills, with the ability to effectively collaborate with business leaders, technical teams, customers, and auditors.
Bachelor's degree in a related field required; industry certifications such as Security+, CISA, CRISC, CGRC, or CISSP may be considered in lieu of a degree with at least two years of relevant experience