Cyber Security Compliance Analyst

Job Description

Are you passionate about cybersecurity and compliance? Do you thrive in innovative and collaborative environments? We are seeking a Cyber Security Compliance Analyst to help ensure our organization meets regulatory requirements and industry best practices while contributing to a safer digital environment.

In this role, you will:

Regularly review and assess policies, procedures, and systems to ensure compliance with regulations and adherence to industry standards.

Serve as the primary liaison with regulatory agencies to meet compliance requirements.

Maintain comprehensive documentation of compliance activities, including policies, procedures, audits, and remediation plans.

Prepare reports for management and regulatory bodies.

Conduct training programs to enhance employee awareness of cybersecurity risks and best practices.

Collaborate with IT and other departments to develop and maintain a robust security strategy.

Evaluate applications requested by the organization to identify security vulnerabilities and ensure compliance.

Assist in the investigation of security breaches, ensuring adherence to security policies.

Contribute to developing and revising security policies and procedures.

Identify, assess, and manage cybersecurity risks through risk mitigation strategies.

What you bring to the role:

Proven experience in cybersecurity roles with hands-on expertise in security technologies.

Strong understanding of cybersecurity principles, standards, and frameworks such as ISO 27001, NIST, and SOC 2.

Experience with risk management and compliance tools and methodologies.

Proficiency in configuring and monitoring compliance tools, preparing detailed reports, and creating dashboards.

Strong communication skills to effectively present findings to technical and non-technical audiences, paired with excellent documentation skills.

Certifications such as CISSP, CISA, CISM, or similar (preferred).

Additional skills that are nice to have:

Familiarity with compliance tools like SecureFrame, Drata, or Scrut.

Experience working with a managed Security Operations Center (SOC).

Hands-on technical experience in cybersecurity.

Experience in a highly regulated environment, such as government-related industries.

Key competencies for success:

Communication: Convey clear, convincing, and timely messages while fostering open two-way communication.

Strategic Thinking: Focus on seeing the “big picture,” anticipating future challenges, and committing to actionable goals.

Teamwork: Value and contribute effectively to team efforts to achieve desired outcomes.

Customer-Centricity: Build strong relationships and make decisions with the customer’s needs in mind.

Minimum Qualifications:

A bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent work experience.

At least 5 years of experience in a cybersecurity-related role.

Proven business acumen and a track record of building solid relationships with business partners.

A valid driver’s license (must be maintained throughout employment).