Information Security Compliance Analyst

POSITION PURPOSE

The Information Security Compliance Analyst plays a pivotal role in safeguarding the organization’s information assets by leading compliance initiatives, managing vendor and client security assessments, and supporting incident response efforts. This position ensures alignment with industry standards such as ISO, SOC 2, PCI DSS, and GDPR, while maintaining robust governance frameworks and security policies. The analyst collaborates cross-functionally to enhance security operations, drive continuous improvement, and uphold regulatory compliance across ITA Group’s systems and third-party relationships.

ACCOUNTABILITIES & PERFORMANCE EXPECTATIONS

Security Operations & Compliance

• Lead client and vendor security assessments, including third-party reviews, risk assessments, and questionnaire responses.
• Build and manage workflows for vendor assessments and due diligence.
• Oversee compliance audits (SOC2, PCI, ISO, TruSight), including evidence collection and process optimization.
• Support the Information Systems Incident Response Team (ISIRT) during security events.
• Assist in developing requirements for security tools and operational procedures.
• Evaluate and recommend emerging security technologies and products.
• Provide off-hours support on a rotating and as-needed basis.
• Coordinate with external suppliers to resolve security incidents.

Systems & Tools Management

Audit & Incident Management

Compliance Certifications

Governance Management

POSITION REQUIREMENTS