Compliance and Audit Administrator
ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you’ll work side‑by‑side with a powerful collective of thinkers and experts shaping life‑changing solutions for patients, caregivers and consumers worldwide. ZSers drive impact by bringing a client‑first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life‑changing impact to ZS.
Responsibilities
- Perform audits in accordance with the plan based on various control frameworks and standards;
- Establish, monitor, document, and update compliance controls and findings;
- Create remediation plans based on findings and initiate projects, as necessary, in order to meet commitments made within remediation plans;
- Participate in client‑directed audit and compliance initiatives, including but not limited to, SAS 70 (SSAE 16) audits, client SOX audit assistance requests and Vendor Data Security and Privacy assessments;
- Develop and update IT Policies, process maps, templates and supporting change management tools, as often as needed;
- Assist in the development of training material in support of IT Policy adoption enterprise wide; participate in compliance training workshops, as needed;
- Monitor compliance with existing IT Policies and supporting tools;
- Liaison with ZS Client Teams and the ZS SaaS Hosting Team Manager to ensure that all mutually agreed upon business operations SLAs are met;
- Plan and participate in DR planning and testing;
- Assist with vendor review and selection in support of on‑going internal and client directed compliance initiatives;
- Assist the Legal team with the review of client contracts as it relates to technology specific compliance requirements;
- Assist the Legal team with the interpretation of various US and EU laws and technical compliance directives and determine potential impact to the organization;
- Assist with the completion of client RFPs and RFIs as it relates to compliance;
- Work with IT, consulting, SD Group and legal teams on compliance standards;
- Security and compliance projects as assigned.
What You’ll Bring
- 2 years of information systems experience with audit planning, risk assessment, and reporting/documentation
- Hardware, software, and networking information technologies
- IT security, controls, practices, and procedures
- Working knowledge of various control frameworks like the following are desirable:
- COBIT – Control Objectives for Information and Related Technology
- ISO/IEC 27002:2005 – Code of Practice for Information Security Management
- ITIL – Information Technology Infrastructure Library
- SOX – Sarbanes‑Oxley
- HIPAA HITECH – Health Insurance Portability and Accountability
- SAS 70 – Statement of Auditing Standards No. 70
- SSAE 16 – Statement on Standards for Attestation PCI DSS – Payment Card Industry Data Security Standard
- Engagements
- ISAE 3402 – International Standard for Assurance Engagements
- NIST – National Institute of Standards and Technology
- Disaster Recovery planning and testing
- Fluency in English
- Client first mentality
- Intense work ethics
- Collaborative spirit and problem solving skills
How You’ll Grow
- Cross‑functional skills development & custom learning pathways
- Milestone training programs aligned to career progression opportunities
- Internal mobility paths that empower growth via s‑curves, individual contribution and role expansions
Hybrid Working Model
ZS is committed to a flexible and connected way of working. ZSers are onsite at clients or ZS offices three days a week. Combined flexibility to work remotely two days a week is also available. The magic of ZS culture and innovation thrives in both planned and spontaneous face‑to‑face connections.
We offer a comprehensive total rewards package that supports your health and well‑being, financial future, time away, and professional development.
Travel
Travel is a requirement at ZS for client‑facing ZSers; business needs of your project and client are the priority. While some projects may be local, all client‑facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures.
ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law.