IT Security Audit and Compliance Analyst - Remote Opportunity

KinderCare; Beaverton (OR); On-site; USD 90,000 - 150,000; Full time

Job summary

KinderCare in Beaverton, OR is seeking an Information Security Compliance Specialist to support planning and execution of the company's security controls. You will partner with Internal Audit, IT teams, and business process owners to assess risk, implement mitigations, and document controls across financial reporting, ITGC, PCI DSS, SOX, SOC2, and COBIT5 scopes.

Strong communication and organizational skills are essential to lead evidence collection, test planning, and coordination with auditors

Qualifications

• Bachelor's degree or equivalent in information science or related field.
• Knowledge of ISO27001, NIST, SOC or other security frameworks.
• Curiosity about IT Security, IT Audit or Governance, Risk and Compliance (GRC) roles.
• Familiarity with information technologies to translate controls, testing and results.
• Ability to work effectively with diverse, cross-functional teams.
• Excellent written and oral communication with strong attention to detail.
• Ability to proactively take information and recommend next steps.
• Outstanding organizational skills and ability to work under pressure.
• Strong relationship-building abilities.
• Proficient with Microsoft Office applications (Word, Excel, PowerPoint, Outlook).

Responsibilities

• Support the annual planning of the company's information security compliance efforts.
• Collaborate with Internal Audit to communicate audit results and drive mitigation.
• Review risk profile with IT teams and update risk register with mitigations.
• Support ITGC, PCI DSS, SOX, SOC2, and COBIT5 testing and communicate results.
• Coordinate with Business Process Owners to document controls related to financial reporting and provide training.
• Coordinate evidence requests with auditors resulting from audits of internal controls over financial reporting.
• Prepare reports to partners and senior management on compliance status.
• Design effective test plans using knowledge and judgement.
• Develop and maintain SOPs and IT policies as needed.
• Prepare and respond to RFPs and Third-Party Questionnaire requests.

Skills

ISO27001 knowledge

NIST/SOC frameworks

GRC mindset

IT auditing

Cross-functional collaboration

Communication skills

Attention to detail

Documentation

Risk assessment

Policy development

Education

Bachelor's degree in information science or related field

Tools

Microsoft Office

Job description

RESPONSIBILITIES

• Support the annual planning of the company's Information Security compliance efforts
• Work with Internal Audit to communicate results of ITGC and potentially operational audits and lead mitigation efforts
• Work with the team to review the organization’s security risk profile, partnering with IT teams to assess, build mitigation plans and update risk register
• Support ITGC, PCI DSS, SOX, SOC2, and COBIT5 control testing, including communicating results in a timely and collaborative manner
• Support the IT Security Analyst II to coordinate with the Business Process Owners in ensuring that documentation, testing, remediation, and the appropriate controls associated with financial reporting are identified and documented in the process documentation, as well as provide education and training
• Support the IT Security Analyst II to coordinate evidence requests with internal and external auditors resulting from audits of the company's internal controls over financial reporting
• Prepare reports to key partners and senior management on the status of compliance efforts
• Use knowledge and judgment to design effective control test plans
• Build, update, and manage Standard Operating Procedures (SOP), and IT Policies as needed
• Craft, update, and handle RFP’s (Requests for Proposal), and Third-Party Questionnaire requests

QUALIFICATIONS

• Bachelor’s degree or equivalent experience in Information Science or other related field or an equivalent combination of education and experience may be considered
• Knowledge of ISO27001, NIST, SOC or other security frameworks desired
• A curiosity about IT Security, IT Audit or Governance, Risk and Compliance (GRC) roles or some combination
• Familiarity with Information Technologies, to be able to translate and interrupt controls, testing and results
• Success in working with multi-functionally with diverse teams desired
• Excellent written and oral communication skills including a high level of attention to detail
• Ability to proactively take information and make recommendations on next steps
• Outstanding organizational skills
• Ability to work optimally under pressure and tight deadlines
• Ability to build and develop strong working relationships
• Proficient digital literacy required, with extensive knowledge of all Microsoft applications (Word, Excel, PowerPoint, Access, Outlook)