REMOTE - Security Compliance Policy Analyst - HCCompPolAnlys_15-4658

Beacon Hill Staffing Group - Topeka, KS

Full-time - Entry Level

Remote - Topeka, KS

Administrative and Support Services

About the position

The Security Compliance Policy Analyst will play a crucial role in defining, implementing, managing, and maintaining cybersecurity compliance to meet or exceed various security, legal, and regulatory frameworks. This position focuses on analyzing and writing policies based on NIST frameworks and requires a basic understanding of security controls and compliance. The analyst will lead compliance initiatives, coordinate audits, and collaborate with stakeholders to enhance the compliance program.

Responsibilities

• Lead cybersecurity compliance initiatives, coordinating internal and external audits.
• Perform day-to-day execution of cybersecurity compliance activities and audit engagements.
• Build partnerships and collaborate with colleagues to provide compliance support and recommendations.
• Assist in creating compliance procedures, guidelines, and control narratives.
• Conduct gap analyses and participate in identifying root causes for remediation plans.
• Monitor cybersecurity control processes to ensure adherence to compliance guidelines and regulatory requirements.
• Act as a subject matter expert for cybersecurity compliance procedures and audit activities.
• Work with leadership to prioritize compliance initiatives aligned with business objectives.
• Support the advancement of the cybersecurity compliance program through process improvement strategies.
• Support and comply with the company's Quality Management System policies.

Requirements

• Bachelor's degree in information technology, business, or related field; or high school diploma and 4 years of relevant experience.
• Prior experience and knowledge of regulatory requirements and control frameworks (e.g., SOX, HIPAA, HITRUST, PCI-DSS, ISO 27001, FDA, NIST 800-53).
• Demonstrated ability to perform essential duties with or without accommodation.
• Authorization to work in the United States without sponsorship.

Nice-to-haves

• Excellent interpersonal and communication skills.
• Experience in a cross-cultural and complex matrix environment.
• Prior experience in an audit-related role with emphasis on cybersecurity compliance.
• Cybersecurity certification (CISA, CRISC, CISM, CISSP, Security +, CC).

Benefits

• Equal Opportunity Employer
• Encouragement for individuals with disabilities and protected veterans to apply.