Security & Compliance Analyst: Risk, Audit & Privacy

Barnhart Energy Company; Memphis, Northern (TN, KY); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Performance bonus

401(k) match

Medical insurance

Dental & Vision insurance

Paid time off

CARES program

Job summary

Barnhart Energy Company is seeking an Information Security & Compliance Analyst to support governance, risk management, and regulatory compliance. You will drive security controls, policy management, and audit readiness across the organization, collaborating with IT, business leaders, and external auditors to improve the security program.

The role requires strong cybersecurity knowledge, clear communication, and the ability to translate security requirements into practical business processes.

Qualifications

• Manage Information Security Governance and Compliance Activities by supporting cybersecurity, compliance, and data privacy initiatives, ensuring alignment with organizational objectives, customer requirements, and applicable regulatory frameworks.
• Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories.
• Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively.
• Support Audit, Compliance, and Security Readiness Activities by coordinating internal and external audits, collecting evidence, responding to customer security assessments, conducting regular cybersecurity tabletop exercises, and tracking corrective actions through remediation.
• Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements.
• Collaborate with Business and Technical Teams to promote security awareness; develop, maintain, coordinate, and track information security and data privacy training programs; monitor remediation activities; review vendor security practices; and provide reporting on security, risk, compliance, and privacy initiatives to leadership.

Responsibilities

• Manage Information Security Governance and Compliance Activities by supporting cybersecurity, compliance, and data privacy initiatives, ensuring alignment with organizational objectives, customer requirements, and applicable regulatory frameworks.
• Develop and Maintain Security and Privacy Documentation, including policies, standards, procedures, risk registers, security assessments, and compliance evidence repositories.
• Conduct Risk Assessments and Control Reviews to identify gaps, evaluate security and privacy risks, and validate that administrative, technical, and operational controls are implemented and functioning effectively.
• Support Audit, Compliance, and Security Readiness Activities by coordinating internal and external audits, collecting evidence, responding to customer security assessments, conducting regular cybersecurity tabletop exercises, and tracking corrective actions through remediation.
• Administer Data Privacy and Information Governance Programs by supporting data classification, data handling, retention practices, privacy assessments, and compliance with contractual and regulatory privacy requirements.
• Collaborate with Business and Technical Teams to promote security awareness; develop, maintain, coordinate, and track information security and data privacy training programs; monitor remediation activities; review vendor security practices; and provide reporting on security, risk, compliance, and privacy initiatives to leadership.

Job description

Barnhart Energy Company is seeking an Information Security & Compliance Analyst to support governance, risk management, and regulatory compliance. You will drive security controls, policy management, and audit readiness across the organization, collaborating with IT, business leaders, and external auditors to improve the security program.

The role requires strong cybersecurity knowledge, clear communication, and the ability to translate security requirements into practical business processes.