Security Compliance & Audit Coordinator II

Lockton; Overland Park (KS); On-site; USD 75,000 - 110,000; Full time

Job summary

Lockton is seeking an experienced Security Compliance Analyst II to operate and mature the organization’s security compliance program. This role will manage recurring audit and assessment activities, coordinate evidence and responses, educate control owners, and serve as a liaison with auditors, clients, and internal stakeholders.

The successful candidate will combine practical audit-cycle experience with strong communication, organization, and business judgment.

Qualifications

• 3–5 years of experience in cybersecurity compliance or information security governance.
• Experience coordinating audit cycles from planning through remediation tracking.
• Experience working with internal or external auditors, including evidence requests and walkthroughs.
• Ability to translate control requirements into clear expectations for technical and business owners.
• Experience preparing responses to client security questionnaires or due-diligence requests.
• Familiarity with security controls, risk concepts, and common frameworks or assurance programs.
• Excellent written and verbal communication skills across technical, business, client, and audit audiences.
• Strong organizational and project-management skills with multiple workstreams and deadlines.

Responsibilities

• Manage end-to-end audit and assessment cycles including planning, scoping, evidence coordination, and closure.
• Coordinate with control owners to collect complete, accurate evidence and evaluate submissions.
• Educate and coach control owners on control intent, evidence expectations, and testing approaches.
• Act as primary day-to-day contact for auditors by coordinating meetings and clarifying requests.
• Support compliance initiatives and evolution of controls toward continuous monitoring.
• Maintain compliance documentation, control narratives, evidence inventories, and remediation plans.
• Identify gaps and partner with tech teams to define remediation actions and monitor progress.
• Contribute to development and maintenance of cybersecurity policies, standards, and procedures.
• Prepare responses to client security questionnaires and assurance inquiries.
• Participate in client discussions, presenting security/compliance information clearly.

Skills

Excellent written and verbal comms

Strong organizational and project‑mgmt

Audit-cycle management

Educate/control owners

Stakeholder management

Education

Bachelor’s degree in Information Security/Cybersecurity/IT/Business/Risk Management or related field

CISA/CRISC/CISSP/CISM/CCSK or comparable certification

Job description

Lockton is seeking an experienced Security Compliance Analyst II to operate and mature the organization’s security compliance program. This role will manage recurring audit and assessment activities, coordinate evidence and responses, educate control owners, and serve as a liaison with auditors, clients, and internal stakeholders.

The successful candidate will combine practical audit-cycle experience with strong communication, organization, and business judgment.