Information Security Compliance Analyst

Davita Inc.; Lakeville (MA); Remote; USD 69,000 - 96,000; Full time

Job summary

A leading cooperative based in Lakeville is seeking an Information Security Compliance Analyst to enhance its information security program. The role involves developing policies, managing risks, and collaborating with cross-functional teams. Applicants should have a Bachelor's degree and a strong foundation in security principles, with relevant certifications favored.

Benefits

Complete insurance package

401(k) with company matching

Flexible scheduling options

Tuition assistance programs

Qualifications

• 3 years of experience in information security roles.
• Familiarity with regulations like GDPR, CCPA.
• Certifications like CISSP or CISM preferred.

Responsibilities

• Develop and analyze information security governance programs.
• Conduct security assessments and audits.
• Coordinate with the Incident Response Team.

Skills

Risk assessment

Information security principles

Governance

Incident response

Data privacy

Education

Bachelor's or University Degree

Tools

GRC frameworks

SIEM

DLP

Cloud security tools

Job description

Ocean Spray is hiring for a(n) Information Security Compliance Analyst! We're a team of farmers, thinkers, creators, and doers. Whatever your title, whatever your role - it always comes back to this: we're a farmer-owned co-op where everyone rolls up their sleeves to get the job done. Three maverick farmers started it all - and we've been making our own way ever since.

Position Location: We're all about flexibility. This will be a remote role based out of our corporate headquarters in Lakeville, MA. We are open to remote candidates.

The Information Security Compliance Analyst will ensure adequacy and continuous monitoring of information security within the organization. This role focuses on developing and analyzing information security governance programs, recommending measures to protect information against unauthorized access or loss, and creating policies, procedures, and guidance to establish, implement, maintain, and oversee Ocean Spray's Information Security Program. You will collaborate with cross-functional teams to conduct security assessments and audits, communicate changes in security policies, and provide guidance and support to enhance the organization's information security capabilities.

A Day in the Life...

• Assist the Associate Director of Data Information Security and Privacy in designing, developing, and deploying Ocean Spray's security policies and standards.
• Focus on governance and controls surrounding the protection and availability of data.
• Communicate security risks and strategies to management and other stakeholders effectively.
• Perform risk analysis for IT system resources to ensure a balanced approach to risks, vulnerabilities, threats, and countermeasures, achieving an acceptable level of risk based on the criticality of individual systems.
• Oversee key controls such as patching, vulnerability management, and endpoint protection.
• Provide guidance and technical assistance to management, including analysis, evaluation, and recommendations for approval of IT system resource security plans and requirements in support of Ocean Spray's governance program.
• Perform security control testing for effectiveness, threat mitigation, and make recommendations as needed.
• Identify opportunities for continuous improvement in the organization's information security posture and implement necessary changes.
• Collaborate with Ocean Spray's legal team on data privacy and protection initiatives.
• Work with other business lines when information security functions are requested.
• Stay up-to-date on emerging risks and assess their impact on Ocean Spray. Work with Tech Partners and the business to determine security recommendations to mitigate risk.
• A key member of the Incident Response Team; coordinate incident response efforts to address security breaches and mitigate their impact.

What We Are Looking For:

Required

• Strong understanding of information security principles, practices, and technologies.
• Experience in performing risk assessments and developing risk mitigation strategies.
• Familiarity with relevant regulations and standards (e.g., GDPR, CCPA, ISO 27001, NIST).
• Experience with SAP GRC Solutions
• Proficiency in developing and managing GRC frameworks.
• Knowledge of key security controls such as patching, vulnerability management, and endpoint protection.
• Experience in coordinating and participating in incident response efforts, including breach notifications.
• Experience in evaluating and managing third-party vendors and platforms.
• Familiarity with security tools and technologies (e.g., SIEM, IDS/IPS, DLP).
• Experience with cloud security (e.g., AWS, Azure, Google Cloud).

Preferred

• Information Security Certifications (e.g., Security+, CISSP, CISM)
• Information Privacy Certifications (e.g., CIPP, CIPM)

Education:

Bachelor's or University Degree (Required)

Work Experience:

At least 3 Years of Experience

Annual Salary:

$69,800 - $95,900

The base salary range information above serves as a guideline of the position's typical hiring range.We value and appreciate what makes you unique and will consider a variety of factors when determining an offer.These factors include, but are not limited to, your skills and experience, external and internal benchmarks, as well as overall company considerations.Certain positions may be eligible for short-term and long- term incentive rewards. We also offer a competitive and comprehensive benefits program that supports all aspects of your health and well-being.

Benefits:

• Complete insurance package on Day-1 that includes a plethora of health and wellness programs
  • Health, Dental and Vision insurance
  • Health savings account
  • Flexible spending account
  • Life and accident insurance
  • Employee assistance program
  • Telehealth services
  • Fertility benefits
  • Transgender benefits
  • 1:1 health coaching and more
• 401(k) with up to 6% Company matching; additional potential discretionary match at year-end
• Short-Term Incentive/Performance bonuses
• Flexible scheduling options
• Vacation pay, up to three weeks of time (pro-rated for your first year of employment)
• Holiday pay for 12 holidays
• Career development and growth opportunities
• Tuition/Education assistance programs
• Access to LinkedIn Learning
• Scholarship programs for children of employees
• Parental leave
• Bright Horizons Family Solutions - Back-up care, tutoring, etc.
• Adoption assistance
• Bereavement leave
• Up to $300 fitness reimbursement
• Up to $300 massage reimbursement
• Employee appreciation events
• Employee discounts
• Charitable giving

Who We Are:

You might have our iconic cranberry juice in your fridge or have gotten into heated holiday debate about what's better - canned or fresh cranberry sauce. But did you know that the hardworking people growing the superfruit in our products are 700 family farmers that own our cooperative? They entrust us with what is most precious to them to create new and innovative products that will delight consumers and grow this beloved brand today and into the future.

Team members, farmers, consumers and communities alike--we value what makes us unique and strive to connect our farms to families for a better life by living our values:

• Grower Mindset - We embrace our grower-owners innovative spirit and heritage through confidence, learning and focus on the future.
• Sustainable Results - Guided by purpose, we are focused on delivering results for our grower-owners.
• Integrity Above All - We are ethical, doing the right thing for our grower-owners, customers, consumers and each other
• Inclusive Teamwork - We build diverse and inclusive teams that strengthen our cooperative.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.