Security Compliance Analyst

As one of the world’s largest food-grade logistics companies, McLane Global relies on the efficiency of its fulfillment centers. We consider all our warehouses to be systematic and operate with a customer-centric mentality. To deliver on our promise to customers, we rely on exceptionally talented, bright, and committed people. We cultivate and embrace a diverse employee population. We recognize that people with diverse backgrounds, experiences and perspectives fuel our growth and enrich our global culture. McLane Global Security Compliance Analyst is responsible for developing, maintaining, and validating the organization’s cybersecurity compliance framework. This role ensures all IT systems, integrations, and reporting platforms operate in alignment with federal security standards, including FISMA, NIST 800- 53 / 171, and FedRAMP-authorized cloud requirements. The analyst provides oversight of documentation, assessments, and audits to maintain a strong compliance posture and support contract obligations.

Key Responsibilities

• Develop and maintain the System Security Plan (SSP), security policies, and procedures.
• Track and update the Plan of Action & Milestones (POA&M) for open security findings.
• Maintain documentation required for audits and federal reporting.
• Work with IT teams to ensure implementation of NIST 800-53 and NIST 800-171 controls.
• Validate that all external IT service providers include required security clauses in contracts.
• Ensure role-based access controls (RBAC) and multi-factor authentication (MFA) are consistently enforced.
• Coordinate and support annual cybersecurity assessments and penetration testing.
• Conduct internal compliance reviews and self-assessments to validate control effectiveness.
• Serve as point of contact during external audits and third-party assessments.
• Maintain the risk register and track security vulnerabilities through remediation.
• Participate in incident response planning and ensure compliance reporting requirements are met.
• Provide compliance impact analysis for changes to IT systems or integrations.
• Oversee continuous monitoring activities, including log reviews and security metrics.
• Develop and submit compliance reports (monthly, quarterly, annually) as required by contract.
• Provide dashboards and executive summaries on compliance status.

Requirements

Preferred Qualifications

Benefits

Disclaimer

Employees must be able to perform the essential functions of the position satisfactorily and if requested, reasonable accommodation will be provided to enable employees with disabilities to perform the essential functions of their job, absent undue hardship.

Furthermore, job descriptions typically change over time as requirements and employee skill levels change. The Employer retains the right to change or assign other duties to this position.