Senior Analyst, Information Security Compliance
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Analyst for managing information security compliance initiatives at Kontoor Brands. Collaborating with various teams to support regulatory compliance across iconic denim brands.
Responsibilities:
- Assist in the support of a strong regulatory compliance program
- Collaborate with compliance control owners to verify and validate controls
- Collect and prepare evidence for regulatory audits and internal assessments
- Analyze and validate evidence for accuracy and completeness
- Maintain controls documentation and create new documentation as needed
- Identify and implement automation opportunities
- Provide key input into risk mitigation strategies
- Support periodic reviews and updates to information security policies
- Support IT risk, audit, and compliance reporting
Requirements:
- 7+ years of experience in a combination of information security and audit
- Working knowledge in data analytics and programming (Python scripts etc.)
- Working knowledge/experience in compliance regulations such as SOX, GDPR, CCPA, and PCI DSS industry standards
- Security certifications including CISA, CISM, CISSP, and GIAC is highly desired
- Bachelor's degree in a related field of study, or equivalent experience
Benefits:
- Competitive benefits program providing choice and flexibility for employees and families
- Resources for physical, emotional, social, and financial wellbeing
- Discounts on apparel
- Four weeks of Paid Parental Leave for eligible new parents
- Flexible Fridays
- Tuition Reimbursement
Similar Jobs
Contract Security, Compliance, Access Analyst
Program Analyst Senior managing compliance and security operations for IHS Electronic Health Records Modernization program. Collaborating with security teams and ensuring personnel access policies are met.
AWS Cloud Security, ICAM Specialist
AWS Cloud Security and ICAM Specialist supporting Case Management Modernization for the U.S. Courts. Designing and managing authentication frameworks within cloud environments.
Infrastructure Security Team Lead
Lead the Infrastructure Security Team at SOFTSWISS, an international iGaming company. Responsible for defining security strategies, priorities, and team development in a remote setting.
Identity Security Engineer – ITDR, CSPM
CrowdStrike Identity Security Engineer managing ITDR and CSPM capabilities for a federal agency. Leading threat detection and response efforts with extensive CrowdStrike platform experience.
Corporate Security Engineer – IAC & Automation
Corporate Security Engineer leading design and optimization of security infrastructure at OnePay. Focusing on automation, data protection, and collaboration across IT and security teams.
Senior Manager – Offensive Security
Senior Manager leading offensive security services at Cyber Advisors, focusing on threat-driven risk assessments and remediation activities. Mentoring teams and enhancing security methodologies.
Senior Software Developer, Application Security
Senior Software Developer focusing on Application Security for healthcare technology projects. Responsible for implementing secure development practices and identifying security risks.
Ingeniero de Seguridad
Security Engineer at Stefanini with focus on security controls, incident responses, and compliance. Requires 4-6 years of experience in similar roles with strong technical skills.
Senior Application Security Architect – AppSec
Senior Security Architect at Stone Tech focusing on integrating security into application development lifecycle. Collaborating with development teams to prevent vulnerabilities and enhance security measures.
Senior Security & Compliance Analyst
Senior Security & Compliance Analyst at Headspace ensuring security capabilities and adherence to compliance frameworks. Collaborating with cross-functional teams to mitigate risks in technology stack.
IT and Information Security Coordinator
IT and Information Security Coordinator at Tenchi managing security and IT support roles. Focused on Third-Party Cyber Risk Management with a dedicated team across multiple countries.
Senior Enterprise Architect, Security
Senior or Principal Enterprise Architect at Workday leading security-focused strategic conversations with customers. Using deep technology expertise to translate complex concepts into clear business outcomes.
Infrastructure Security Engineer, Secret Clearance
Infrastructure Security Engineer managing security for Protected B classified environments. Responsible for implementing security controls for cloud deployments and ensuring compliance with Canadian government standards.
Learning Facilitator, Security and Property Protection
WBS TRAINING employee representing the area of security and protective services. Focusing on competency development of course participants in a home office setting.
Security Advisor – Control Assessor
Security Advisor performing control gap assessments and advising on compliance in cybersecurity. Collaborating with clients to improve security measures and deliver tailored solutions.
Vice President – Technology and Security
Vice President of Technology and Security leading the technology strategy at NSTXL. Overseeing cybersecurity, AI strategy, and enterprise systems for government and defense environments.
Identity Security Manager – GOV
Identity Security Manager leading IAM and PAM operations for PNC's secure payment integration technology. Overseeing access management and driving continuous improvement in security processes.
Identity & Devices Security Architect – Client Consulting
Security Architect at Cyclotron designing Microsoft 365 Identity and Device Management tools. Collaborate with clients to improve security posture across Microsoft ecosystems.
Director of AI Security
Senior Leader for Securing AI responsible for defining and executing AI security strategy. Overseeing risk management for AI systems across the enterprise for leading healthcare technologies.
Cybersecurity Engineer II
Cybersecurity Engineer II responsible for security oversight and compliance of enterprise products and information systems. Collaborating with teams to ensure best security practices and address vulnerabilities.