Who you are

• The ideal candidate has a background in GRC, security, or regulatory environments, and demonstrates strong oral and written communication skills
• They are a critical thinker, highly organized, and adept at managing multiple projects in a fast-paced cybersecurity environment
• This is a project-driven role that demands strong attention to detail, confidence in communicating with both internal and external stakeholders, and a commitment to understanding BeyondTrust technology as well as the evolving security compliance landscape
• Strong listening, written, and verbal communication skills, with the ability to communicate at all levels of the organization
• Familiarity with industry regulations and frameworks such as NIST 800-53/800-171, ISO 27001/27701, and SOC 2
• Ability to interpret technical data (application logs, architecture diagrams, technical reports)
• Experience in compliance management-related activities such as Policy, Standards, and Procedure documentation
• Technical skills working with MS Office Suite (Word, PowerPoint, Excel, OneNote, Visio)
• Ability to work both independently and collaboratively with other departments/teams to achieve goals and represent the business
• Ability to work efficiently with cross-functional teams, managing multiple projects simultaneously while under firm deadlines
• Bachelor’s degree
• 2 or more years of experience coordinating or leading SOC or ISO assessments
• Experience supporting Cloud Platforms (AWS, Azure) and/or Software-as-a-service (SaaS) applications
• CISSP or CRISC certifications
• Quantitative risk management

What the job involves

• This is a contract role with BeyondTrust GRC for 9+ months for a full-time Compliance Analyst role
• As a Compliance Analyst, you will support and enhance our security compliance programs, with a particular focus on vendor risk management, customer trust, and compliance assessments
• This role will contribute to the continuous improvement and execution of the GRC program, including documentation, audit coordination, project tracking, and stakeholder communication
• Collects compliance evidence to support a variety of legal, operational, and security requirements relating to GRC’s audit programs
• Identify and report on gaps between company practices and audit requirements
• Arrange communication and contacts with involved stakeholders
• Coordinate and research requests from the organization regarding security, compliance, and privacy-related questions
• Assist in the update and review of Policies, Standards, and SOP in accordance with applicable compliance and/or regulatory requirements
• Assist with organizational compliance by aligning with applicable regulations and policy communication, ensuring that requirements for the compliance program are implemented
• Assess vendors for compliance with BeyondTrust security requirements
• Respond to external security questionnaires
• Assist in delivering compliance and security awareness training, education modules, and role-based training
• Provides help with compliance audit and assurance activities as needed

Benefits

• Healthcare
• Retirement
• Generous time off policy