Compliance Analyst - Springfield, United States - Levi, Ray & Shoup, Inc.

Description

LRS is seeking for a Compliance Analyst who will coordinate the companys efforts to obtain and maintain information security frameworks such as ISO 27001, SOC 2, NIST SP 800-53, and HIPAA.

You will also coordinate the completion of IT security questionnaires for current and potential customers.

You will participate in the development and monitoring of controls associated with these security frameworks.

You will be responsible for validating that critical processes and controls are working, identifying risk areas, and recommending risk control mitigation.

You will coordinate continuous improvements via process changes and/or new controls.

This position will be part of the Compliance team. The Compliance team has company-wide responsibilities for programs addressing data privacy/data security, exports, and affirmative action among other topics. Program elements include policy and procedure development, monitoring and training.

While your focus will be on IT Security Certifications and security questionnaires, you may also assist with other compliance programs.

You will work in our corporate headquarters in Springfield, Illinois. A hybrid work arrangement may be available permitting working from home one or two days each week.

Essential Job Functions

• Lead the effort to obtain and maintain information security frameworks for various business units, including coordination with internal and external auditors.
• Develop associated training programs for employees.
• Manage the completion of data security questionnaires received from current and potential customers. Obtain necessary information from business units to provide answers and evidence of compliance prior to submitting LRS response.
• Maintain working knowledge of LRS business units including their products and services.
• Oversee the third-party risk management program related to frameworks.
• Maintain required information in the companys Governance, Risk and Compliance (GRC) software. Use the software to monitor ongoing compliance.
• Advise senior management on issues related to frameworks including briefings on changes to framework requirements.
• Respond to the Legal team in support of securing contracts with customers.
• Provide management with reports on compliance issues, gap analysis, audit status, and risks.

This list highlights the most critical responsibilities of the job but is not all-inclusive. There may be additional duties and responsibilities for this job.

Candidate Requirements

• 3 years experience developing and maintaining compliance with at least one of these security frameworks: ISO 27001, SOC 2, NIST
• 3 years experience conducting Information Technology risk analysis.
• A track record of success in collaborating on issues as part of a team to find solutions and drive efforts.
• Ability to keep multiple projects on track simultaneously as well as the ability to prioritize and meet deadlines.
• Working knowledge of Microsoft Office products including Word, Excel and PowerPoint.
• You must have permanent authorization to work in the USA for any employer without sponsorship.

The following can make you a stronger candidate:

• Experience with IT security.
• Experience maintaining controls within a GRC software platform such as Drata.
• Job-related certifications such as CISSP or CISA.
• Experience with 3rd party vendor risk management.
• Technical experience with the IBM mainframe environment, Linux, Microsoft Azure or other cloud technologies.
• Experience in IT governance, risk management, audit, compliance, or other related information security domains.
• Experience with or knowledge of multiple security frameworks.
• Experience developing and/or presenting training, especially on information security topics.

Success Factors

The successful candidate will have experience across multiple security and compliance domains with experience in audit process/procedure, risk analysis and mitigation, control testing, and continuous improvement initiatives within a collaborative environment.

Your success in this role be assessed primarily by your ability to obtain and maintain the assigned IT security certifications.

The ability to contribute to the overall Compliance teams effectiveness will also impact your success.

The Compliance Team

You will report to the Director of Compliance who reports to the Chief Administrative Officer.

The compliance team will consist of you, the Director of Compliance and a Senior Compliance Analyst who is responsible for other compliance program efforts.

The team is responsible for supporting business initiatives at the corporate level and for several lines of business. For an overview of the various business units at LRS, visit

LRS is an equal opportunity employer.

Applicants for employment will receive consideration without unlawful discrimination based on race, color, religion, creed, national origin, sex, age, disability, marital status, gender identity, domestic partner status, sexual orientation, genetic information, citizenship status or protected veteran status.

Salary range:
$85,000 - $120,000 annually plus paid overtime and full benefits. This range represents the low and high for this position. The salary will vary depending on factors including, but not limited to, experience and performance.

#LI-KK2