REMOTE - Security Compliance Policy Analyst

Beacon Hill Staffing Group - Honolulu, HI

Full-time - Entry Level

Remote - Honolulu, HI

Administrative and Support Services

About the position

The Security Compliance Policy Analyst at Beacon Hill Staffing Group is responsible for analyzing and writing policies based on NIST frameworks, while supporting the implementation and management of cybersecurity compliance initiatives. This role requires a foundational understanding of security controls and compliance, with a focus on regulatory frameworks such as SOX, HIPAA, and PCI-DSS. The analyst will collaborate with various stakeholders to enhance compliance processes and ensure adherence to internal policies and regulatory requirements.

Responsibilities

• Lead cybersecurity compliance initiatives, including coordinating audits and managing timelines.
• Execute day-to-day cybersecurity compliance activities and support internal/external audit engagements.
• Build partnerships across all levels to provide compliance and audit support, including evidence collection and process improvement recommendations.
• Assist in creating compliance procedures, guidelines, and control narratives.
• Conduct gap analyses and participate in identifying root causes for remediation plans.
• Monitor cybersecurity control processes to ensure adherence to compliance guidelines and regulatory requirements.
• Act as a subject matter expert for compliance-related procedures and audit activities.
• Work with leadership to prioritize compliance initiatives aligned with business objectives.
• Support the advancement of the cybersecurity compliance program through process improvement strategies and risk mapping.
• Maintain regular attendance and uphold company values.

Requirements

• Bachelor's degree in information technology, business, or related field; or high school diploma and 4 years of relevant experience.
• Prior experience and knowledge of regulatory requirements and control frameworks (e.g., SOX, HIPAA, HITRUST, PCI-DSS, ISO 27001, NIST 800-53).
• Demonstrated ability to perform essential duties with or without accommodation.
• Authorization to work in the United States without sponsorship.

Nice-to-haves

• Excellent interpersonal and communication skills.
• Experience in a cross-cultural and complex matrix environment.
• Prior experience in an audit-related role with a focus on cybersecurity compliance.
• Cybersecurity certification (CISA, CRISC, CISM, CISSP, Security +, CC).

Benefits

• Equal Opportunity Employer
• Encouragement for individuals with disabilities and protected veterans to apply.