Security Compliance Analyst
Remote
Full Time / Contract to Hire
We are seeking a detail-oriented Security Compliance Analyst to ensure our organization meets the Payment Card Industry (PCI) Data Security Standard (DSS) requirements and other cybersecurity compliance initiatives. The ideal candidate will coordinate company-wide audits, support Quality Assurance (QA) testing, create policies, define controls, and facilitate Security Awareness training within our Cyber Security team.
Responsibilities:
- Coordinate IT security-related audits and compliance for PCI DSS while ensuring adherence to applicable laws, including the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR).
- Implement procedures to protect information systems from unauthorized access and potential destruction.
- Maintain and update Information Security Policy and Procedures documentation, including any waivers.
- Provide guidance to IT management on audit processes, controls, and best practices for information security.
- Support assessment reporting and remediation activities, including incident response and client inquiries related to the information security program.
- Collaborate with the Cyber Security team to develop and implement the Information Security Training and Awareness program, including content development and metric reporting.
- Participate in the planning, development, testing, and management of a disaster recovery environment.
- Be available to work various shifts, including weekends and nights, and participate in on-call support rotations as needed.
Qualifications:
- Bachelor's degree in Information Technology, Cybersecurity, or a related field.
- Proven experience in security compliance, particularly with PCI DSS, CCPA, and GDPR.
- Strong understanding of information security principles, practices, and risk management.
- Excellent analytical and problem-solving skills.
- Ability to work collaboratively in a team environment and communicate effectively across all levels of the organization.
- Relevant certifications (e.g., CISSP, CISA, CISM) are a plus.
Join our team and play a crucial role in protecting our organization’s information assets and ensuring compliance with industry standards!
Send your resume to kaci.railey@cdw.com