IT Compliance and Security Analyst

Role Overview: As an IT Compliance and Security Analyst at SDG, your role will be crucial in ensuring that the organization's IT infrastructure, policies, and processes align with regulatory and industry security standards. You will play a key part in conducting risk assessments, managing audits, enforcing security policies, and mitigating vulnerabilities to safeguard organizational assets. Key Responsibilities: - Ensure adherence to IT security compliance frameworks including SOC 2, ISO 27001, NIST, HIPAA, GDPR, and PCI-DSS. - Conduct risk assessments, gap analyses, and recommend mitigation strategies. - Assist in developing, implementing, and maintaining IT security policies and procedures. - Stay updated on evolving compliance regulations and security best practices. - Review security alerts, investigate incidents, and support incident response activities. - Collaborate with IT teams to ensure effective implementation and maintenance of security controls. - Own internal and external security audits, including evidence collection and audit coordination. - Maintain records related to security controls, compliance reports, and risk assessments. - Liaise with stakeholders, track audit findings, and ensure timely remediation. - Conduct compliance tasks diligently, preventing delays or breaches. - Conduct compliance awareness training for employees. - Educate teams on compliance best practices. - Assess third-party vendors for compliance risks. - Ensure vendor contracts align with IT security policies. - Possess technical understanding of IT infrastructure-related compliances. Qualifications Required: - Bachelor's degree in Information Security, IT, Computer Science, or related field. - 5+ years of experience in IT compliance, risk management, or audit. - Knowledge of security frameworks and regulatory compliance. - Strong analytical, problem-solving, and communication skills. - Certifications such as CISA, CEH, or Security+ are a plus.,