Information Security Compliance Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information security compliance analyst supporting ImageTrend’s healthcare and emergency-response software platforms. Coordinating audits, risk management, cloud compliance, and security controls across AWS and Azure.
Responsibilities:
- Support administration, documentation, monitoring, and continuous improvement of information security compliance, governance, and risk management programs
- Coordinate compliance initiatives aligned with NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, and other requirements
- Maintain policies, standards, procedures, control matrices, ownership records, audit artifacts, evidence repositories, and compliance records
- Participate in internal and external audits, assessments, and compliance reviews
- Evaluate security control design and effectiveness; support control testing, reviews, findings, corrective actions, and remediation through closure
- Track POA&Ms, corrective action plans, security exceptions, compensating controls, and risk acceptance documentation
- Assist with risk assessments, control gap analyses, risk register management, mitigation tracking, and policy development
- Support vendor risk management, third-party security assessments, and risk monitoring
- Validate and collect evidence for security controls in AWS and Microsoft Azure environments
- Collaborate with Information Security, IT, Engineering, Product, Legal, Privacy, and other teams
- Coordinate compliance projects, milestones, deliverables, status updates, and assigned action items
- Research cybersecurity, privacy, compliance, regulatory, and cloud security trends and recommend improvements
- Support security awareness initiatives, customer security questionnaires, due diligence requests, and continuous monitoring
- Travel to orientation, industry or company events, or onsite meetings as required
- Perform additional duties as assigned
Requirements:
- Bachelor's degree in Information Security, Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or the equivalent combination of education and relevant experience
- Proven professional experience in information security, cybersecurity, compliance, audit, governance, risk management, information technology, or a related field
- Experience or familiarity with NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, ISO 27001, or similar frameworks
- Ability to evaluate security controls and support cloud compliance requirements within AWS and Microsoft Azure environments
- Experience supporting compliance assessments, control testing, audit preparation, risk assessments, gap analyses, continuous monitoring, or related GRC initiatives
- Experience with GRC platforms, compliance management tools, vendor risk management, or third-party security assessments is preferred
- Strong organizational, project management, analytical, investigative, research, problem-solving, and documentation skills
- Ability to coordinate cross-functional initiatives, influence stakeholders, drive accountability, and manage remediation efforts
- Excellent verbal, written, interpersonal, and stakeholder communication skills
- Experience coordinating audits, compliance assessments, remediation efforts, or governance initiatives across multiple stakeholders
- Industry certifications such as Security+, SSCP, CGRC, CISA, CRISC, CCSK, AWS Security Specialty, Azure Security Engineer Associate, or similar credentials are preferred
- Ability to maintain discretion with proprietary and confidential information
- Ability to travel as required, up to 10%
- Strong work ethic, integrity, collaboration, and team orientation
Benefits:
- Annual base salary of $80,000-$100,000 USD
- Bonus
- Benefits
- Perks
- Community gains
- 100% virtual work arrangement
- Equal opportunity workplace
- Workplace accommodations for applicants with disabilities
Similar Jobs
Information Security Analyst
Information Security Analyst defending Satellite Office’s global brand portfolio from cyber threats. Hunting threats, responding to major incidents, and strengthening protection across 2,000+ IT assets.
Security Analyst – Third Shift
Security Analyst investigating alerts and incidents for nuHarbor’s managed cybersecurity services. Executing response actions and escalating high-severity findings for client protection.
Security Analyst
Security Analyst supporting Sprezzatura’s secure VA.gov Platform and federal ATO lifecycle. Translating cybersecurity requirements into engineering guidance, documentation, assessments, and compliance actions.
Security Analyst II
Security Analyst II defending Netrix Global client environments and infrastructure through 24/7 SOC monitoring. Investigating incidents, improving SIEM detections, hunting threats, and automating security operations.
Information Security Analyst, Mid-Level – DevSecOps
DevSecOps analyst securing AWS environments and CI/CD pipelines for SGA’s corporate systems. Automating vulnerability remediation, secrets management, and Secure by Design practices.
Senior Security Analyst
Senior Security Analyst strengthening GRC, compliance, and cloud security. Protecting mortgage-finance systems and data at AI-native operating system company Valon.
Consultant – Global Security Analyst
Security Analyst monitoring and investigating Microsoft-centric security incidents for Austrian and international clients. Developing detections, playbooks and automations across SIEM, XDR, EDR and cloud security.
Staff Cybersecurity Analyst
Staff Cybersecurity Analyst securing D-Wave’s quantum computing systems, software, and cloud services. Leading threat detection, incident response, vulnerability management, and enterprise resilience.
AI Security Analyst
AI Security Analyst securing generative AI, LLM, and agentic systems at 8am, a business-management software company. Supporting SOC monitoring, AI governance, risk management, compliance, and incident response.
ISSO / RMF Cybersecurity Analyst
ISSO/RMF Cybersecurity Analyst guiding federal IT systems through RMF and ATO compliance. Managing security controls, vulnerabilities, continuous monitoring, and incident response for Xcelerate Solutions.
Mid-Level Information Security Analyst, MSS
Analista de Segurança da Informação monitorando SOC, SIEM, Microsoft 365 Defender e firewalls para cliente empresarial da SEK. Atuando em incidentes, investigações e melhorias de segurança.
Cybersecurity Analyst, Consultant
Cybersecurity analyst protecting CybelAngel clients through alert investigation, leak detection, and incident reporting. Supporting cybersecurity solutions and contributing to dark-web research and product improvements.
Information Security Analyst
Information Security Analyst supporting IAM access provisioning, audits, and identity lifecycle management. Resolving access issues for corporate applications and systems across the United States.
National Security Analyst
National Security Analyst supporting U.S. Navy outreach events and public affairs at GDIT. Planning Fleet Weeks, Navy Weeks, executive engagements, and media activities.
Senior Information Security Analyst
Senior Information Security Analyst strengthening Golden 1 Credit Union’s cybersecurity controls. Leading vulnerability management, threat hunting, incident response, and compliance support for a California credit union.
Workday Analyst – Security Administration, Job Architecture
Senior Workday Analyst managing Workday security and job architecture for Lennar, a leading U.S. homebuilder. Governing HR data, audits, reports, and enterprise change.
Security Analyst
Security Analyst protecting Peraton subsidiary systems through CDM security, vulnerability scanning, and FISMA controls. Managing risk assessments, audits, incident response, and security tooling.
Security Analyst – Mid-Atlantic region
Security Analyst preventing and investigating cyber incidents for GuidePoint Security, a cybersecurity solutions and services provider. Monitoring SIEM, networks, endpoints, and logs across U.S. Eastern Time operations.
Security Analyst – Part-Time
Part-time Security Analyst strengthening wi-Q’s hospitality ordering platform security and compliance. Managing ISO 27001, PCI DSS, risk, access governance, and audit readiness.
Senior Threat Intelligence Analyst
Senior threat intelligence analyst researching cyber threats for Team Cymru, an internet threat intelligence company. Analyzing malicious infrastructure, producing intelligence reports, and guiding detection and analytics tooling.