Security Compliance Analyst

Security Compliance Analyst

Work Location: Little Rock, AR (Hybrid)

Duration of Assignment: 24 Months

Pay Rate Range: $40.00-$42.00/hr on W2

Duties

The Security Compliance Analyst performs work tied to affiliation compliance assurance planning and execution. This position engages in the implementation of policies and procedures meant to ensure compliance with applicable laws, regulations, and standards. Responsibilities include:

• Tracks and interprets laws or regulations impacting business, and offers suggestions to functional managers seeking to ensure compliance.

Security and Risk Management

Provides guidance to business partners for all information security-related issues and identified security risks. Creates, manages, and enforces information security policy. Provides oversight of framework compliance. Manages enterprise audit remediation and CAP management. Manages vulnerability management plan. Conducts anti-phishing campaigns. Conducts and manages the security awareness and training program. Manages the third party risk management program. Researches, analyzes, interprets, and monitors files to determine, demonstrate and maintain adequacy in compliance with regulations and implemented Company programs (HiTrust, ServiceNow, etc.). Conducts initial reviews of alleged compliance violations and escalates to leadership as needed. Works collaboratively offering guidance as it pertains to audits, updates and/or changes to content, rules, policy and/or regulations. Analyzes, documents, compiles and distributes resources to impacted departments and/or customers.

Knowledge, and Experience

Minimum three (3) years related experience in any combination of the following areas: compliance, health industry regulatory, legal, and information technology security. Previous experience conducting various system audits and working with external vendors, conducting information security risk assessments and/or experience related to information security. Previous experience with ServiceNow, Tenable. Knowledgeable with common information security compliance frameworks (HIPAA, HITRUST, NIST, etc.) Preferred. Note: these are key/critical skills/experience areas that are required. Familiarity with IT compliance programs and processes. Knowledgeable of laws and/or regulations in the area of HIPAA compliance.

Nice to Haves

Third Party Risk management and/or vulnerability management experience Location

Licensing/Certification

Professional security management certification (Certified Information Systems Security Professional (CISSP)) or other similar credentials desired.