Location: Miami,FL, USA
Apex Systems is looking to fill an IT Security Compliance Analyst position with someone with strong knowledge of regulatory requirements and industry standards (e.g., PCI, SOX). Please review the details of the role below and apply directly if interested. Please note, only qualified candidates will be reached out to.
Position: IT Security Compliance Analyst
Contract Rate: 50-55/hr on W2
Length: 6 Month Contract to Perm
Location: Miami, FL
Onsite Requirements: 3 days a week in Miami – Tuesday – Thursday
Project Details:
This role is crucial to ensuring that our IT operations comply with all relevant regulations and internal policies.
We require candidates with:
- Proven experience in IT compliance
- Strong knowledge of regulatory requirements and industry standards (e.g., PCI, SOX)
- Excellent analytical and problem-solving skills
- Exceptional communication and documentation abilities
Job Description:
The Sr II Analyst, IT Compliance is responsible for ensuring that IT practices adhere to relevant laws, regulations, and industry standards, such as Sarbanes-Oxley (SOX) and Payment Card Industry (PCI) compliance. The role facilitates compliance of applications and infrastructure. The Sr II Analyst conducts assessments and implements controls to mitigate risks related to regulatory requirements. The role will maintain absolute confidentiality of sensitive files, data and materials accessed, discussed, or observed while adhering to compliance policies and procedures.?
Essential Functions:
Research and Innovation: Function as a SME for IT Compliance. Stay abreast of emerging technologies, industry trends, and best practices. Research new tools, frameworks, and methodologies that can enhance solution designs and delivery. Evaluate and recommend appropriate solutions. Develop and communicate technology roadmaps. Review and improve tools, methods, processes, and procedures.
Regulatory Compliance Assessment: Oversee and validate recurring assessments by collecting and reviewing evidence demonstrating the organization's compliance with applicable laws, regulations, and industry standards. This includes interviewing stakeholders to ensure compliance requirements are met and understood. Review policies, procedures, and controls to ensure alignment with requirements. Play a lead role with cross functional teams to resolve compliance issues.
Compliance Monitoring and Reporting: Monitor ongoing compliance activities, track regulatory changes, and prepare reports for management and regulatory agencies. Document compliance findings, issues, and lead remediation efforts. Conduct impact assessments to determine the impact of regulatory changes and report findings to leadership.? Assess compliance-related risks and develop risk mitigation strategies. Stay abreast of regulatory changes and industry developments to ensure compliance programs remain current and effective.
Internal Audits and Reviews: Conduct internal assessments and reviews to evaluate the effectiveness of controls and identify areas for improvement. Review access controls, data protection measures, and security configurations. Respond to Internal and help respond to External Audits and other stakeholder's findings and inquiries, preparing official documentation where appropriate.
Vendor and Third-Party Compliance Management: Assist in vendor selection, assess the compliance of vendors and third-party service providers to ensure they meet all security and regulatory requirements.? Audit third-party service providers and work to resolve vendor issues.
Policy and Procedure Development: Help develop, review, and update IT policies, procedures, and standards to address compliance requirements. Create documents such as acceptable use policies and data retention policies plans. Publish and communicate policies and procedures to stakeholders.
Training and Awareness: Acts as the expert in compliance policies, standards, and procedures. Provide training and awareness programs to educate stakeholders about compliance requirements and best practices.