Security Compliance Analyst

Posted 3hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Security Compliance Analyst maintaining security compliance program and supporting audits at Blackpoint Cyber. Collaborating with internal stakeholders on security policies and compliance initiatives.

Responsibilities:

  • Support the maintenance of a comprehensive security compliance program aligned with laws, regulations, and industry best practices.
  • Maintain and optimize key programs like Third Party Risk Management and Security Awareness Training.
  • Apply expertise in GDPR, HIPAA, PCI DSS, NIST 800-171/CMMC, ISO 27001, SOC2, and FedRAMP controls as well as U.S. state privacy regulations to ensure practices remain compliant and up to date.
  • Support internal audits, partnering with stakeholders to remediate findings.
  • Support external audits (e.g., SOC 2) through preparation and planning, monitoring and remediation coordination, documentation and follow-up tracking.
  • Bring a structured, methodical approach to assisting with cross-functional project implementation.
  • Stay current on emerging threats, regulations, and security best practices to strengthen compliance posture.

Requirements:

  • Bachelor’s degree (or equivalent experience) in IT, Information Security, Computer Science, Information Systems Management, Privacy, Law, Compliance, or related field
  • Minimum 5 years of experience in privacy, security, or security compliance roles, including experience with internal audit
  • Strong verbal and written communication, organizational, and documentation skills
  • Experience working with Atlassian Suite tools for collaboration and task management
  • Deep knowledge of regulatory and compliance frameworks, including SOC2, ISO 27001, GDPR, NIS2, CMMC, FedRAMP, HIPAA, PCI DSS
  • Strong analytical and problem-solving abilities with strong attention to detail
  • Proven ability to work with multiple stakeholder groups, coordinating as needed
  • Hands-on experience with framework and control mapping, compliance automation tools (One Trust Certification Automation, DRATA, and others), and third-party risk management (TPRM) tools
  • Solid understanding of compliance risk, including implementing compensating controls and translating risk assessments for technical and non-technical audiences
  • Experience working in remote or distributed environments
  • Relevant professional certifications are preferred, such as CISA, CIPP/US, CIPP/E, CIPM, or CIPT

Benefits:

  • Health, Vision, Dental, and Life Insurance plans
  • 401k plan
  • Discretionary Time Off
  • Other minor perks