IT Security Compliance Analyst

3-5 Must-Haves Hands-on IT Security Compliance / GRC experience supporting enterprise security programs Experience with security audits, compliance assessments, risk assessments, and corrective action planning Strong knowledge of security controls, policies, procedures, and governance frameworks Experience supporting regulatory compliance requirements and partnering with technical teams to remediate findings Ability to gather audit evidence, evaluate controls, and work cross-functionally with IT and security stakeholders

Preferred Skills Healthcare or highly regulated industry experience Experience with security awareness and training programs Familiarity with industry frameworks such as NIST, ISO 27001, HIPAA, HITRUST, SOC, or CIS Controls Experience performing Business Impact Analyses (BIA) Experience implementing and maintaining technical security controls This is much more of a Security Compliance/GRC Analyst than a hands-on security operations role. Focus on candidates with audit, risk, compliance, controls, policy, and governance experience rather than SOC analysts, incident responders, penetration testers, or security engineers. Healthcare compliance experience would be a major plus