Security Compliance Analyst II

Lockton Companies; Overland Park (KS); In loco; USD 80.000 - 110.000; Tempo pieno

Descrizione del lavoro

Lockton Companies in Overland Park, Kansas seeks an experienced Security Compliance Analyst II to manage audit and assessment cycles, coordinate evidence, and serve as a liaison with auditors, clients, and internal stakeholders.

You will educate control owners on control intent, testing approaches, and deadlines, while maintaining documentation and supporting continuous monitoring and improvements to our security program.

Competenze

• 3-5 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, or a closely related field.
• Experience managing or coordinating audit cycles from planning through final response and remediation tracking.
• Experience working with internal or external auditors, including evidence requests, walkthroughs, follow-up questions, and issue resolution.
• Experience translating control requirements into clear expectations for technical and business control owners.
• Experience preparing responses to client security questionnaires, due-diligence requests, or customer assurance inquiries.
• Working knowledge of security controls, risk concepts, audit evidence, and common cybersecurity frameworks or assurance programs.
• Excellent written and verbal communication skills; able to explain security and compliance topics to diverse audiences.
• Strong organizational and project-management skills; ability to handle multiple workstreams and deadlines.
• Ability to self-direct, prioritize tasks, and deliver high-quality results under tight deadlines.
• Discretion when handling confidential information.
• Bachelor’s degree in Information Security, Cybersecurity, IT, Risk Management, or related field, or equivalent practical experience.

Mansioni

• Manage end-to-end audit and assessment cycles, including planning, scoping, request tracking, evidence coordination, status reporting, walkthroughs, issue follow-up, and closure activities.
• Coordinate with control owners to collect evidence; evaluate submissions for quality and alignment with requirements.
• Educate and coach control owners on control intent, evidence expectations, testing approaches, and deadlines.
• Act as primary day-to-day contact for auditors by coordinating meetings and clarifying requests.
• Support compliance initiatives and evolution of controls toward repeatable monitoring.
• Maintain compliance documentation including narratives, evidence inventories, testing records, remediation plans, and status reporting.
• Identify gaps and remediation actions, partnering with teams to monitor progress.
• Contribute to cybersecurity policies, standards, and procedures to support requirements.
• Prepare responses to client security questionnaires and other inquiries regarding Lockton’s security program.
• Participate in client discussions, presenting security and compliance information clearly.
• Collaborate with stakeholders across departments to communicate compliance impacts and obligations.
• Improve response content and reusable materials for client assurance.
• Review security language in contracts and customer requirements; coordinate feedback with Legal.

Conoscenze

Audit coordination

Stakeholder communication

Project management

Security controls knowledge

Client questionnaires

Documentation

Formazione

Bachelor's degree or equivalent

Strumenti

GRC platforms

Evidence repositories

Questionnaire tools

Workflow systems

Descrizione del lavoro

Overland Park, Kansas, United States of America

At Lockton, we’re passionate about helping our people achieve their ultimate potential. Our people are curious, action-oriented and always striving to make ourselves and those around us better. We’re active listeners working to ensure understanding and problem solvers developing innovative solutions. If you can see yourself delivering excellent service to clients, giving back to our communities and being a part of our caring culture, you belong here.

Lockton is seeking an experienced Security Compliance Analyst II to help operate and mature the organization’s security compliance program. This role will manage recurring audit and assessment activities, coordinate evidence and responses, educate control owners, and serve as a knowledgeable liaison with auditors, clients, and internal stakeholders. The successful candidate will combine practical audit-cycle experience with strong communication, organization, and business judgment.

Key Responsibilities

• Manage end-to-end audit and assessment cycles, including planning, scoping, request tracking, evidence coordination, status reporting, walkthroughs, issue follow-up, and closure activities.
• Coordinate with control owners to collect complete, accurate, and timely evidence; evaluate submissions for quality and alignment with control requirements before providing them to auditors or assessors.
• Educate and coach control owners on control intent, evidence expectations, testing approaches, recurring deadlines, and sustainable compliance practices.
• Act as a primary day-to-day contact for internal and external auditors by coordinating meetings, clarifying requests, facilitating walkthroughs, and tracking open questions and commitments.
• Support compliance initiatives and the continued evolution of controls toward repeatable, measurable, and increasingly continuous monitoring practices.
• Maintain compliance documentation, including control narratives, evidence inventories, testing records, remediation plans, procedures, and management-ready status reporting.
• Identify control gaps, evidence weaknesses, and process inefficiencies; partner with control owners and technology teams to define practical remediation actions and monitor progress.
• Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
• Prepare responses to client security questionnaires and other client inquiries regarding Lockton’s security program, controls, assurance activities, and risk-management practices.
• Participate in client and prospective-client discussions, presenting security and compliance information clearly while appropriately managing sensitive or restricted information.
• Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders to support projects and communicate compliance impacts and obligations.
• Contribute to the maintenance and improvement of approved response content, supporting documentation, and reusable materials for client assurance activities.
• Review security and compliance language in contracts, addenda, and customer requirements when needed; identify concerns and coordinate feedback with Legal and relevant subject-matter experts.
• Stay current on relevant cybersecurity compliance expectations, audit practices, and industry developments.

Qualifications

• 3-5 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, or a closely related field.
• Demonstrated experience managing or coordinating audit cycles from planning through final response and remediation tracking.
• Experience working directly with internal or external auditors, including evidence requests, walkthroughs, follow-up questions, and issue resolution.
• Experience translating control requirements into clear expectations for technical and business control owners.
• Experience preparing responses to client security questionnaires, due-diligence requests, or customer assurance inquiries.
• Working knowledge of security controls, risk concepts, audit evidence, and common cybersecurity compliance frameworks or assurance programs.
• Excellent written and verbal communication skills, including the ability to explain security and compliance topics to technical, business, client, and audit audiences.
• Strong organizational and project-management skills, with the ability to manage multiple workstreams, deadlines, dependencies, and stakeholders.
• Ability to self-direct, prioritize tasks independently, and deliver high-quality results under tight deadlines.
• Sound judgment and discretion when handling confidential, sensitive, and restricted information.
• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent practical experience.

Preferred Qualifications

• Experience reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.
• Experience supporting SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.
• Experience with governance, risk, and compliance platforms; evidence repositories; questionnaire-response tools; or workflow and ticketing systems.
• Professional certification such as CISA, CRISC, CISSP, CISM, CCSK, or a comparable audit, risk, or security credential.
• Experience in a client-facing role within a regulated, professional-services, financial-services, insurance, or similarly complex environment.

Success in This Role

Success will be demonstrated through disciplined audit execution, high-quality and timely evidence, informed and accountable control owners, clear auditor and client communication, effective issue follow-through, and continuous improvement of Lockton’s compliance and client-assurance processes.

#LI-JM

Equal Opportunity Statement

Lockton Companies is proud to provide everyone anequal opportunity to grow and advance. We are committed to an inclusive culture and environment where our people, clients and communities are treated with respect and dignity.

At Lockton, supporting diversity, equity and inclusion is ingrained in our values, and we believe that we are at our best when we fully embrace everyone. We strive to cultivate a caring culture that learnsfrom, celebrates and thrives because of ourbreadth of differences. As such, we recognize that recruiting, developing and retaining people with diverse backgrounds and experiences is vital and enabling our people to thrive personally and professionally is critical to our long-term success.

About Lockton

Lockton is the largest privately held independent insurance brokerage in the world. Since 1966, our independence has allowed us to serve our clients, take care of our people and give back to our communities. As such, our 13,100+ Associates doing business in over 155 countries are empowered to do what’s right every day.

At Lockton, we believe in the power of all people. You belong at Lockton.

How We Will Support You

At Lockton, we empower you to be true to yourself in all that you do. Your success is our success, and we provide opportunities to help you grow and create a rewarding career path, however you envision it.

We are ready to meet you where you are today, and as your needs change over time. In addition to industry-leading health insurance, we offer additional options to support your overall health and wellbeing.

Any Employment Agency, person or entity that submits an unsolicited resume to this site does so with the understanding that the applicant's resume will become the property of Lockton Companies, Inc. Lockton Companies will have the right to hire that applicant at its discretion and without any fee owed to the submitting Employment Agency, person or entity. Employment Agencies, who have fee Agreements with Lockton Companies must submit applicants to the designated Lockton Companies Employment Coordinator to be eligible for placement fees.