Compliance Analyst

The Information Security Compliance Analyst must possess initiative and drive and have broad relevant technical knowledge for a cloud based environment. Good expertise and excellent written and verbal communication skills are also key attributes for the position. The Information Security Compliance Analyst must provide direction, coordination and operations planning to accomplish the technical compliance goals and objectives effectively. Job Role and Responsibility The Information Security Compliance Analyst should ensure the existence of appropriate security governance within the DC and Cloud and internally controlled environments (policy, procedures, baselines and monitoring); assessment of required controls, and testing of adherence to required policies, procedures and monitoring. The Information Security Compliance Analyst will collaborate with other members of the Security and IT teams to define appropriate and effective information security controls and will work with the various business units to implement them. The Information Security Compliance Analyst will also be responsible for performing gap analysis exercises while working collaboratively with Functional Business Unit and IT teams to implement required remediation effectively. Essential functions for this role include: Perform a deficiency analysis and implement required controls to meet IT Policy and Regulatory Compliance requirements in a cloud environment. Escalate and resolve risks and issues as required. Communicate the compliance effectiveness to Management on a scheduled basis. Test for adherence to policy and regulatory controls, procedures and standards. Prepare for engagement reviews and quality assurance activities. Follow up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure appropriate remediation measures have been achieved timely. Perform impact analysis as needed where controls fail or are considered ineffective. Track mitigation steps and ensure that risks are managed appropriately and in a timely manner. Assist with other GRC activities as required. Provide ongoing guidance and consultation to the organization to promote a progressive and sustainable GRC compliance initiative. Assist with integrating policy and regulatory compliance requirements into the organizations processes (e.g., change control, mergers and acquisitions) and life cycle activities. Manages timelines, resources, project plans, action item logs, status reports and statistics to ensure milestones, goals and commitments are met. Work closely with both Internal and External audit teams. Lead control integration efforts with new or existing systems and supporting architecture Required Skills Bachelor s degree in Computer Science, or related discipline. 3-5 years of Compliance, Security or Audit 5 experience preferably in a DC / Cloud environment. HIPAA, PCI, ISO 27K experience a plus Strong understanding of application, network, operating system and core infrastructure security concepts. Excellent written and verbal communication skills. Effective negotiating and problem solving skills. Experience working with Internal and External Audit teams Proactive and detail orientated team player. Familiarity with common compliance frameworks such as COBIT, COSO, ISO 27001K, and industry recognized guidance such as NIST a plus Strong analytical, diagnostic, critical thinking skills Strong ability to represent data in graphical form Preferred Skills Advanced security certifications like CISM, CISA, CISSP-ISSMP preferred RSA Archer GRC and SAP knowledge and experience highly desired Experience working with or utilizing the RSA Archer eGRC application a plus Experience with a large company and/or Big 4 accounting firm .