POSITION SUMMARY:
The Security and Compliance Analyst will be responsible for assisting the Vice President, Enterprise Data Architecture and IT Security with daily support procedures. The Security and Compliance Analyst has the responsibility of assisting senior staff in the evaluation, development, implementation and operational aspects of process standards, procedures and guidelines supporting the company's information security plan and SSAE18 SOC reporting compliance to assure the effectiveness of existing procedures and policies and to detect changes and report on their impacts to the compliance program.
Primary Tasks/Activities:
• Manage and perform SSAE18 audits and ensure adherence to compliance requirements
• Manage and perform audits of internal security controls, security policies and SOC controls, documenting and remediating exceptions
• Update compliance controls, security policies and process documentation, as required
• Complete all RFPs and security questionnaires received from APEX clients
• Develop a thorough understanding of business,
systems and processes in order to provide tailored information security solutions and services; minimizing disruption while maximizing impact
• Coordinate and participate in control deficiency remediation as required
• Assist with the change control process and ensure compliance with policies
• Participate in technology projects to identify information security weaknesses in proposed systems /applications, and assist in development of appropriate solutions based on risk
• Conduct phishing assessments and assist with cyber security training as necessary
• Resolve tickets submitted for security issues, questions and reviews
• Administration and operation of security controls as directed i.e., Anti-virus solution, Vulnerability scanner, PAM, etc.
• Assist with Licensing and Support Contracts as necessary
• Responsible for the overall security of systems they will be administering including protec