Associate - Security and Compliance Analyst

apexanalytix; Dadri; Vor Ort; INR 600.000 - 900.000; Vollzeit

Benefits dieser Stelle

Health insurance

401k plan

Flexible work schedules

Internal training & development

Zusammenfassung

apexanalytix is seeking an Associate - Security and Compliance Analyst to support daily IT security operations and SSAE18 SOC reporting compliance. You will assist senior staff in evaluating and implementing process standards, procedures, and guidelines to protect client data and ensure regulatory alignment.

The role covers auditing, control remediation, change control, and participation in security projects to identify weaknesses and craft risk-based solutions.

Qualifikationen

• 2+ years of IT auditing and compliance experience (PCI/HIPAA/ISO 27001)
• Industry standard security certifications (Security+, CEH, SSCP, CISSP, etc.)
• Excellent written and verbal communication skills and strong problem analysis

Aufgaben

• Manage SSAE18 audits and ensure compliance
• Audit internal security controls and SOC controls; document and remediate exceptions
• Update compliance policies and process documentation
• Complete RFPs and security questionnaires for clients
• Understand business processes to provide tailored information security solutions
• Coordinate remediation for control deficiencies
• Assist with change control and policy adherence
• Participate in security projects to identify weaknesses and propose solutions
• Conduct phishing assessments and assist cyber security training
• Resolve security tickets and maintain security administration tools
• Ensure overall security of systems and enforce Apex Security Standards

Kenntnisse

IT Auditing

Security Controls

Risk Assessment

Security Awareness

Communication

Tools

Visio

Jobbeschreibung

Associate - Security and Compliance Analyst

About Us:

apexanalytix is the leading provider of trusted supplier data; supplier portal software; controls, auditand analytics software; and AP recovery audit services. We protect over $5 trillion in spend andprevent or recoverover $3 billion in overpayments annually, and our client portals actively support over 3 million suppliers. Our software and audit services are built on our SmartVM ® database of over 20 million supplier records with contacts, scored for accuracy and age, based on integration with over 650 external data sources and over 10 million communications with suppliers each year. apexanalytix Archimedes™, an advanced cognitive technology and innovation system, supported by IBM Watson ® , is integrated into apexanalytix software and services to harness the power of the future through smarter recoveries, controls, analytics, working capitaland supplier data. We serve over 250 Fortune 500/Forbes Global 2000 clients around the world and are fluent in languages covering 98 percent of global trade.

Our Culture:

At apexanalytix, our culture drives everything! We live our culture of performance, respect, candor, and fun—in that order. Performance is measured by delivering value to our clients, generating goodwill, trust, and partnership. Sincere respect for each other, our diverse backgrounds and our well-being are our cornerstones. We value open and honest relationships with each other, our clients, and our communities. And life is too short to not have fun! We look for team players who possess the qualities of being humble, hungry, and smart.We recruit candidates who will strive for accountability in performance and career growth, serving our clients in long-term respectful relationships, and working in a diverse and caring environment.

The Perks:

We owe our growing success to our team of bright, passionate, and innovative individuals. We truly value our associates and strive to provide the highest quality benefits program, offering competitive compensation packages with tailored bonus plans and generous benefits. Our benefits include health and insurance plans (medical, dental, optical, life insurance, disability insurance, FSA, HSA employee assistance program, supplemental insurance options and pre-paid legal), a generous paid time off plan, 401k plan, flexible work schedules, wellness programs (company fitness and weight loss challenges, financial wellness software tool, and gym membership stipend), associate and customer referral bonus programs, and paid community hours. And here at apexanalytix, you won’t get lost in the shuffle. Our focus on internal training, growth, and development results in annually filling over a quarter of our open positions with internal promotions! With resources such as a strong Mentor Program, Internal Training Portal, plus Education, Tuition, and Certification Assistance, we provide tools for our associates to grow and develop. If you are looking for a place to shine, come join the team!

Description

POSITION SUMMARY:

The Security and Compliance Analyst will be responsible for assisting the Vice President, Enterprise Data Architecture and IT Security with daily support procedures. The Security and Compliance Analyst has the responsibility of assisting senior staff in the evaluation, development, implementation and operational aspects of process standards, procedures and guidelines supporting the company's information security plan and SSAE18 SOC reporting compliance to assure the effectiveness of existing procedures and policies and to detect changes and report on their impacts to the compliance program.

Primary Tasks/Activities:

• Manage and perform SSAE18 audits and ensure adherence to compliance requirements
• Manage and perform audits of internal security controls, security policies and SOC controls, documenting and remediating exceptions
• Update compliance controls, security policies and process documentation, as required
• Complete all RFPs and security questionnaires received from APEX clients
• Develop a thorough understanding of business, systems and processes in order to provide tailored information security solutions and services; minimizing disruption while maximizing impact
• Coordinate and participate in control deficiency remediation as required
• Assist with the change control process and ensure compliance with policies
• Participate in technology projects to identify information security weaknesses in proposed systems /applications, and assist in development of appropriate solutions based on risk
• Conduct phishing assessments and assist with cyber security training as necessary
• Resolve tickets submitted for security issues, questions and reviews
• Administration and operation of security controls as directed i.e., Anti-virus solution, Vulnerability scanner, PAM, etc.
• Assist with Licensing and Support Contracts as necessary
• Responsible for the overall security of systems they will be administering including protecting client data and reporting situations which may provide unintentional elevated access. The employee will regularly review corporate policies and will enforce the policies documented in the Apex Corporate Security Standards.

Required Skills:

Working knowledge of IT Security and compliance including procedures around the following:

• Change Control and Production Deployment
• Auditing and Compliance
• SSAE18 and SOC I and SOC II Reporting
• HIPAA
• Internal IT Security Controls
• Risk Assessment of Third-Party Vendors
• Security Awareness
• Visio

Required Experience:

• 2+ Years of IT Auditing, SSAE18 and/or managing compliance with PCI/HIPAA/ISO 27001
• Industry standard security certifications (Security+, CEH, SSCP, CISSP, etc.)
• Excellent written and verbal communications skillsExcellent listening skillsWell organized strong problem analysis and decision-making abilityExcellent interpersonal skills
• Persistence in following up with all levels within the organization
• Confidence and ability to relate professionally to a wide range of people
• Commitment to excellent customer service
• Self motivated and enthusiasticProven organizational and planning skills, including the ability to take tasks through to completion