Security Compliance Specialist

Harris Computer; Nevada; On-site; USD 80,000 - 90,000; Full time

Benefits offered by this job

Health benefits

RRSP matching

Stock options

Job summary

Harris Computer is seeking a Security Compliance Specialist to advise on security requirements for certifications and audits across SOC 2, ISO 27001, PCI DSS, HIPAA, and Nacha. You will review documentation, identify gaps, and guide evidence collection for audits.

Ideal candidates have 3+ years of relevant experience, strong documentation skills, and the ability to coordinate with internal audit teams and shared services providers. Join a team focused on governance and security controls.

Qualifications

• Three or more years of relevant experience assessing security and compliance requirements.
• Experience advising on security controls for SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and Nacha requirements.
• Familiarity with evidence requests and audit documentation.
• Understanding inclusive vs carve-out scoping for shared services or third-party relationships.
• Experience coordinating with internal and external auditors and corporate functions.

Responsibilities

• Provides security guidance for certification readiness across frameworks.
• Reviews documentation practices to ensure audit readiness and evidence collection.
• Offers security-focused input on shared services and third-party scoping within audit scope.
• Makes security control recommendations to satisfy audit requirements.
• Coordinates with internal audit teams and external auditors throughout the process.

Skills

Security & compliance experience

Audit coordination

Documentation proficiency

Education

Bachelor's degree in Information Security / CS or related field

Job description

Security Compliance Specialist### Security Compliance SpecialistPostuler: Georgia, United States: Texas, United States: Florida, United States: Arizona, United States: Nevada, United States: Temps plein: Publié aujourd'hui: R0047314**WHAT YOU WILL DO** ### **Security Guidance for Certification Readiness*** Advises business units on security requirements applicable to their certification, attestation, assessment, or regulatory scope (e.g., SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and applicable Nacha requirements)* Reviews security documentation, policies, and procedures for completeness and alignment with certification requirements and other applicable security and compliance obligations* Identifies security-related gaps that may need remediation prior to an external audit* Advises on proactive evidence collection, since evidence requests often begin broad (e.g., lists of computers or projects) before narrowing to specific items (e.g., a specific workstation or project); encourages early and continuous evidence gathering rather than waiting for detailed requests ### **Documentation Standards Guidance*** Advises businesses that meetings related to internal audits, business continuity, disaster recovery, and external penetration tests should be well documented with agendas and minutes to support evidence collection during audits and assessments* Reviews documentation practices to confirm they will hold up to auditor scrutiny from a security perspective ### **Shared Services & Third-Party Scoping*** Provides security-focused input on how shared services and corporate/administrative support functions (such as centralized IT, HR, finance, or legal services provided by a parent or corporate entity) should be classified within the audit scope—specifically whether the relationship should be treated as **inclusive** or **carve-out*** Advises on scenarios where a business unit relies on a shared services provider for security-relevant reporting it cannot generate independently (e.g., workstation patching reports or password settings), which typically indicates an inclusive scoping approach rather than carve-out* Recommends involving the shared services provider (e.g., a Corporate IT function) as early as possible in the audit, assessment, or certification process, since certain evidence requests—such as workstation lists, vulnerability scan reports, or patching audit logs—may require lead time to fulfill ### **Security Control Recommendations*** Recommends security controls and improvements needed to satisfy the requirements of the applicable framework* Provides guidance on password settings, patching cadence, and other technical security configurations commonly requested as audit evidence* Reviews penetration test scope and results from a security standpoint to determine whether they provide appropriate evidence for applicable audit, assessment, or certification requirements ### **Audit Coordination Support*** Works in coordination with the business unit's internal audit team and external auditors throughout the audit, assessment, or certification process* Participates in audit planning discussions to ensure security evidence and controls are appropriately represented* Supports communication between the business unit and any shared services or corporate support functions needed to fulfill audit evidence requests* Assists in tracking security-related audit findings through to remediation and closure* Collaborates with corporate support functions (IT, HR, Finance, Legal) when their services fall within the audit scope, ensuring timely delivery of required reports and documentation ## **WHAT WILL MAKE YOU STAND OUT** * Attention to Detail* Analytical Thinking* Communication Proficiency* Advisory/Consultative Skills* Collaboration* Project Coordination ## **WHAT ARE WE LOOKING FOR** ### **Security & Compliance Experience*** Three or more years of relevant experience assessing security and compliance requirements, including hands-on evaluation of technical security controls and supporting audits, assessments, or certification-readiness activities.* Experience advising on security controls required for SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and Nacha requirements* Familiarity with common security evidence requirements referenced during audits (e.g., patching reports, password settings, penetration test results)* Understanding of inclusive vs. carve-out scoping considerations for shared services or third-party relationships from a security perspective* Experience coordinating with internal audit teams, external auditors, and corporate support functions during audit, assessment, and certification processes ### **Documentation & Standards Knowledge*** Understanding of documentation standards expected for internal audits, business continuity, disaster recovery, and penetration testing activities* Experience evaluating the design, implementation, and operating effectiveness of administrative and technical security controls and clearly documenting identified gaps ### **Required Training and Education*** Bachelor's degree in Information Security, Computer Science, or related field* Equivalent work experience may substitute for degree requirement ### **Preferred Certifications*** CISSP (Certified Information Systems Security Professional)* ISO 27001 Lead Implementer* CISA (Certified Information Systems Auditor)* PCIP (Payment Card Industry Professional) and willingness and ability to obtain PCI ISA (Internal Security Assessor) after hire if PCI DSS responsibilities are assigned ### **Key Deliverables*** Security gap analysis reports* Security control recommendations for audit readiness* Guidance documentation on evidence types typically requested by auditors* Security-focused scoping recommendations for shared services relationships* Coordination notes/reports supporting audit evidence collection timelines **COMPENSATION DETAILS**The potential salary range for this role is $80,000 to $90,000 per year, with eligibility for bonus or merit program. Final compensation will be based on experience, skills, market conditions, and internal equity. We offer a competitive Total Rewards program including health benefits, RRSP matching, stock option, and career development opportunities.### À propos de nousHarris fournit des solutions logicielles essentielles pour le secteur public, les soins de santé, les services publics et le secteur privé en Amérique du Nord, en Europe, en Asie et en Australie. Travailler pour Harris est l'occasion idéale de réaliser vos objectifs professionnels ainsi que vos rêves personnels ! Nos employés bénéficient d'un environnement de travail décontracté qui offre un confort tout en fournissant un service de qualité supérieure à nos clients. Nous offrons un ensemble complet d'avantages sociaux ainsi que d'autres \"avantages\" supplémentaires !* Nous donnons à nos employés les moyens de faire la différence* Nous avons une culture d'entreprise riche* Nous offrons la possibilité d'apprendre* Nous sommes financièrement solides et nous appartenons à la plus grande société de logiciels du Canada (CSI)* On s'amuse beaucoup !Suivez-nous sur les médias sociaux pour en savoir plus sur les valeurs, la culture et les initiatives de notre entreprise !**Harris est un employeur à égalité de chances et d'action positive. Nous considérons les candidats sans considération de race, couleur, religion, âge, origine nationale, ascendance, origine ethnique, sexe, identité de genre, expression de genre, orientation sexuelle, statut matrimonial, statut de vétéran, handicap, information génétique, statut de citoyen ou autre groupe protégé par la loi fédérale, provinciale ou locale.** *Si vous souhaitez nous contacter concernant l'accessibilité de notre site Web ou si vous avez besoin d'aide pour remplir le formulaire de demande d'emploi, veuillez nous contacter au (1)-613-226-5611 ou à [e-mail]. Ces informations de contact sont uniquement destinées aux demandes d'accommodement raisonnable et ne peuvent être utilisées pour se renseigner sur le statut des candidatures.*### Égalité d'accès à l'emploi**Égalité d'accès à l'emploi**Harris est un employeur garantissant l'égalité d'accès à l'emploi.Toutes les candidatures éligibles seront prises en compte sans distinction de race, de couleur de peau, de religion, de sexe, d'orientation sexuelle, d'identité de genre, d'origine nationale ou de statut de vétéran protégé, et ne feront l'objet d'aucune discrimination fondée sur un handicap.Les candidats ayant besoin d’un accommodement raisonnable en raison d’un handicap peuvent nous contacter par courriel à l’adresse [e-mail]. Les demandes d’accommodement peuvent être formulées à tout moment. Cette adresse courriel est exclusivement réservée aux demandes d’accommodement et ne peut pas être utilisée pour s’enquérir de l’état d’avancement d’une candidature.Affiche « Connaissez vos droits »EO 13496 : Notification des droits des salariés en vertu de la législation fédérale du travail**Notre engagement en faveur d’un recrutement juste et équitable.**Dans le cadre de notre processus de recrutement, nous utilisons des outils d’intelligence artificielle (IA) lors de la phase de présélection afin d’identifier les candidats dont les qualifications correspondent le mieux aux exigences du poste. Cette technologie favorise l’efficacité et la cohérence lors des premières étapes, mais elle ne remplace en aucun cas le jugement humain. Toutes les évaluations supplémentaires et les décisions finales d’embauche sont prises par nos professionnels du recrutement. L’IA ne prend pas les décisions finales d’embauche.