Lead and support efforts for security compliance certifications such as ISO 27001, SOC 2, PCI DSS, HIPAA, HITRUST, and others.
Manage evidence collection and responses for external audits and certifications.
Monitor, document, and report compliance activities, making decisions regarding audit findings and remediation progress.
Handling the Security Controls requirements in line with Client Expectations.
Perform internal audits, control testing, and gap assessments to assess compliance status.
Develop, maintain, and enforce security policies, standards, and procedures.
Provide leadership with guidance on compliance risks, emerging trends, and areas for improvement.
Provide security compliance training and awareness to employees.
Lead the development and maintenance of IT and Security Risk Assessment procedures and processes.
Collaborate with business units outside of Information Security to complete the Risk Assessment and track Risk Treatment activities.
Recommends and supports the deployment and use of additional security products and tools.
Conducting Risk Assessments and Vendor Security Assessments.
Provide incident response support during security events.
Participate in analyzing, troubleshooting, and investigating system anomalies using security reports, network traffic, logs, and alerts.

Lead and support efforts for security compliance certifications such as ISO 27001, SOC 2, PCI DSS, HIPAA, HITRUST, and others.
Manage evidence collection and responses for external audits and certifications.
Monitor, document, and report compliance activities, make decisions regarding audit findings and remediation progress.
Handling the Security Controls requirements in line with Client Expectations.
Perform internal audits, control testing, and gap assessments to assess compliance status.
Develop, maintain, and enforce security policies, standards, and procedures.
Provide leadership with guidance on compliance risks, emerging trends, and areas for improvement.
Provide security compliance training and awareness to employees.
Lead the development and maintenance of IT and Security Risk Assessment procedures and processes.
Collaborate with business units outside of Information Security to complete the Risk Assessment and track Risk Treatment activities.
Recommends and supports the deployment and use of additional security products and tools.
Conducting Risk Assessments and Vendor Security Assessments.
Strong practical experience with Business Impact Analysis (BIA).
Provide incident response support during security events.
Participate in analyzing, troubleshooting, and investigating system anomalies using security reports, network traffic, logs, and alerts.

Senior Security Compliance Analyst

Key skills