IT Compliance Analyst

$90,000 - $100,000/Yr

Prestige Consumer Healthcare - Tarrytown, NY

Full-time - Mid Level

Tarrytown, NY

Management of Companies and Enterprises

About the position

The IT Compliance Analyst at Prestige Consumer Healthcare is responsible for ensuring compliance with information security policies and procedures, particularly in relation to Sarbanes-Oxley compliance and NIST CSF standards. This role involves managing cybersecurity training programs, conducting vulnerability assessments, and collaborating with internal and external auditors to maintain and enhance security controls. The analyst will also be tasked with optimizing processes and documentation to support the company's growth and operational efficiency.

Responsibilities

• Work with internal and external auditors to manage Sarbanes-Oxley Compliance and Segregation of Duties.
• Keep all global IT SOPs current and reviewed on an annual basis.
• Create and update all IT policies and procedures related to NIST CSF compliance.
• Manage the Cybersecurity training program and fake phishing attacks for employees.
• Train staff on new security policies and procedures.
• Manage vendor security compliance audits and support recommendations.
• Lead efforts in collecting and organizing written responses and documentation from vendors.
• Schedule and coordinate vulnerability assessments and penetration tests.
• Organize and conduct meetings of the cloud security review team and coordinate vendor assessments.
• Create and present regular reports to IT senior management.

Requirements

• A bachelor's degree or higher education diploma.
• Minimum of 2-3 years of experience focused on information security.
• Minimum of two years of experience applying project management concepts.
• Background in working with auditors for Sarbanes-Oxley compliance.
• Familiarity with NIST CSF compliance and cloud compliance requirements.
• Excellent written and verbal communication skills.
• Self-starter in developing original documents, SOPs, and global policies.

Nice-to-haves

• Background in Cyber Security training and controls.
• Experience with enterprise-level solutions and driving continuous improvement.

Benefits

• Competitive salary range of $90,000 - $100,000 per year.
• Hybrid work schedule with remote work options on Mondays and Fridays.
• Opportunity for professional development and continuous improvement.