Senior IT Security Compliance Analyst

Five Rivers IT, Inc; Fair Lawn (NJ); On-site; USD 125,000 - 175,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Vacation

Job summary

Five Rivers IT, Inc. is seeking a Senior IT Security Compliance Analyst to lead audits and drive governance, risk and compliance initiatives for multiple clients in a managed services setting.

The role requires 10+ years of security audit experience (SOC 2, ISO 27001, PCI DSS, HIPAA) and strong collaboration with auditors and engineering teams across NYC metro and beyond.

Qualifications

• Bachelor’s degree or equivalent work experience in CS/IT.
• 10+ years of experience managing information security audits (SOC 2, ISO 27001, PCI DSS, HIPAA).
• Experience aligning security programs with standards (ISO 27001, NIST, CIS, ITIL, COBIT).
• Strong written and verbal communication skills.
• Strong program management skills.
• Experience coordinating with auditors/regulators.
• Experience managing security tooling.

Responsibilities

• Lead planning, scoping, execution and documentation of audits across technology risks.
• Coordinate information requests between auditors and IT/Engineering.
• Maintain ongoing compliance using security tools and perform periodic checks.
• Research new security compliance requirements and evaluate controls.
• Support remediation efforts and validate closure with evidence.
• Write detailed findings and remediation plans.
• Provide actionable security guidance to engineers for cloud environments.
• Educate control owners on compliance requirements and implement risk-based controls.
• Manage incident documentation and lessons learned, with client communication.

Skills

Audit management

SOC 2

ISO 27001

NIST

CIS

ITIL

COBIT

Regulatory compliance

Program management

Communication skills

Education

Bachelor’s in Computer Science / related field

Tools

Audit management tools

Job description

Senior IT Security Compliance Analyst

At Five Rivers IT, we build and service reliable IT infrastructures for midsized businesses. Five Rivers IT has been growing at a consistent rate of 30% a year for the last 3 years.

We are in search of a Senior IT Security Compliance Analyst to join the dynamic team of professionals providing world‑class IT services to its clients in the NYC metro area. This is a great opportunity for a self‑starter with a proven track record to develop, implement, and support various initiatives in the area of governance, risk and compliance.

Responsibilities

• Lead the planning, scoping, execution and documentation of audits primarily in areas associated with technology and technology‑related risks.
• Act as a liaison between Auditors and Engineering/IT by coordinating requests for information and coordinating responses to any observations.
• Maintain proactive ongoing compliance by utilizing compliance tool to perform periodic security tasks and checks.
• Research new security compliance requirements and assist in evaluating compliance control requirements.
• Support and monitor remediation efforts of audit findings and validate the closure by reviewing relevant evidence.
• Write detailed findings, remediation plans, and other supporting documentation.
• Provide actionable, technical advice to engineers to enhance security control design & effectiveness (including for cloud environments).
• Develop a close partnership with engineering control owners to educate them on compliance requirements and develop risk‑appropriate control implementation solutions.
• Responsible for Incident Management: incident documentation, ensure risk analysis and severity, manage containment, lead investigation, ensure proper notification protocol, conduct & document lessons learnt, report on findings to then communicate them to the client.

Required Qualifications

• Bachelor's in Computer Science, Computer Engineering, Information Systems or related field or equivalent work experience.
• 10+ years of experience managing Information Security audits (e.g., SOC 2, ISO 27001, PCI DSS, HIPAA).
• Experience implementing security techniques, practices, and controls that can be applied to address risks.
• Experience operating as part of an Information security program in alignment with common information technology management frameworks such as ISO 27001, NIST, CIS, ITIL, COBIT, etc.
• Strong written and verbal communication skills.
• Strong program management skills.
• Experience working closely with auditors and/or external regulators.
• Experience managing security tools.

Preferred Qualifications

• Experience with Audit Management tools.
• Security certification.
• Prior experience leading or managing security audits at a SaaS/Cloud company or as a Security Auditor at an audit firm.
• Systems Admin or Network Admin experience implementing security controls.

Other Details about the Job

• This job requires working for multiple clients across multiple environments in a managed services setting.
• This is a Full‑Time position.
• Compensation for IT Security Compliance Analyst will range from $125,000 to $175,000 based on experience, if your experience falls outside required ranges compensation may be based on other open roles.
• All standard benefits are included such as medical/dental/vision insurance and vacation time.
• We encourage and reward professional certifications.

Please send your resume with the expected salary. Applications lacking expected salary will not be considered.