Security Compliance Analyst I

Lockton; Overland Park (KS); On-site; USD 60,000 - 85,000; Full time

Job summary

Lockton seeks a Security Compliance Analyst I to support security compliance and client assurance activities. You will coordinate audit requests, collect and validate evidence, and help control owners understand responsibilities while supporting auditor interactions and responses about the security program.

This role suits a developing compliance professional who is organized, curious, and able to work across technical and business teams, contributing to policies and client discussions with

Qualifications

• Experience in cybersecurity compliance, information security governance, technology risk, IT audit, client assurance, or related field.
• Experience supporting audits, assessments, control testing, evidence collection, or remediation tracking.
• Ability to coordinate with technical or business stakeholders to obtain documentation and meet deadlines.
• Understanding control requirements and communicating evidence expectations clearly to control owners.
• Experience contributing to client security questionnaires or due-diligence responses.
• Foundational knowledge of security controls, risk concepts, audit evidence, and frameworks.
• Strong written and verbal communication, attention to detail, and ability to manage multiple deadlines.

Responsibilities

• Coordinate audit requests, collect and validate evidence, and track deadlines.
• Educate control owners on control intent, evidence expectations, and timelines.
• Support auditor interactions, including meeting coordination and clarifications.
• Maintain compliance documentation: narratives, evidence inventories, procedures, testing records, logs.
• Identify missing evidence and potential control gaps; assist with remediation follow-up.
• Develop, review, and maintain cybersecurity policies, standards, and procedures.
• Prepare draft responses to client security questionnaires and due-diligence requests.

Skills

Audit coordination

Evidence collection

Communication skills

Documentation

Education

Bachelor’s degree in Information Security, Cybersecurity, IT, Business, Risk Management, or related field

Job description

Your Responsibilities

Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities. This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program. The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.

Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities. This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program. The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.

Key Responsibilities

• Support audit and assessment cycles by maintaining request lists, coordinating evidence collection, tracking deadlines, scheduling walkthroughs, documenting questions, and following up on open items.


• Work with control owners to collect complete, accurate, and timely evidence; perform an initial quality review before materials are submitted for further review or provided to auditors.


• Help educate control owners on control intent, evidence expectations, recurring deadlines, and documentation standards.


• Support interactions with internal and external auditors, including meeting coordination, request clarification, walkthrough preparation, and tracking follow-up questions and commitments.


• Maintain compliance documentation such as control narratives, evidence inventories, procedures, testing records, issue logs, and remediation trackers.


• Identify missing evidence, documentation inconsistencies, and potential control gaps; elevate concerns and assist with remediation follow-up.


• Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.


• Prepare and maintain draft responses to client security questionnaires and due-diligence requests using approved information about Lockton’s security program and controls.


• Assist with client and prospective-client security discussions by preparing materials, documenting questions, and coordinating responses with subject-matter experts.


• Maintain reusable answer content and supporting documentation for client assurance activities.


• Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders on compliance-related requests and projects.


• Stay current on cybersecurity compliance concepts, audit practices, and relevant industry developments.

Qualifications

• 1-3 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, client assurance, or a related field.


• Experience supporting audits, assessments, control testing, evidence collection, or remediation tracking.


• Experience coordinating with technical or business stakeholders to obtain documentation and meet deadlines.


• Ability to understand control requirements and communicate evidence expectations clearly to control owners.


• Experience contributing to client security questionnaires, due-diligence requests, or similar written responses.


• Foundational knowledge of security controls, risk concepts, audit evidence, and cybersecurity compliance frameworks or assurance programs.


• Strong written and verbal communication skills, attention to detail, and the ability to self‑direct, prioritize tasks independently, and organize multiple assignments and deadlines.


• Sound judgment and discretion when handling confidential, sensitive, or restricted information.


• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent practical experience.

Preferred Qualifications

• Familiarity with reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.


• Exposure to SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.


• Experience with governance, risk, and compliance platforms, evidence repositories, questionnaire‑response tools, or workflow systems.


• Experience in a regulated, professional‑services, financial‑services, insurance, or similarly complex environment.

Success in This Role

Success will be demonstrated through reliable audit support, accurate and timely evidence, effective follow‑up with control owners, clear documentation, consistent client‑questionnaire responses, and continued growth in security compliance knowledge and judgment.