Senior IT Security & Compliance Lead

Five Rivers IT, Inc.; Fair Lawn (NJ); On-site; USD 125,000 - 175,000; Full time

Benefits offered by this job

Medical/dental/vision

Vacation time

Professional certifications encouraged

Job summary

Five Rivers IT, Inc. in the NYC metro area seeks a Senior IT Security Compliance Analyst to lead audits, drive governance, risk and compliance initiatives across multiple client environments in a managed services setting.

You will coordinate with auditors and engineering, implement security controls, and mentor teams while supporting incident management and remediation efforts. Strong background in SOC 2, ISO 27001, PCI DSS, HIPAA preferred.

Qualifications

• 10+ years of experience managing Information Security audits (e.g., SOC 2, ISO 27001, PCI DSS, HIPAA).
• Experience operating within information security programs aligned with ISO 27001, NIST, CIS, ITIL, COBIT.
• Strong written and verbal communication skills; effective liaison with auditors and regulators.

Responsibilities

• Lead planning, scoping, execution and documentation of audits for technology-related risks.
• Coordinate information requests between Auditors and Engineering/IT; respond to observations.
• Maintain ongoing compliance using compliance tools and perform periodic security checks.
• Develop remediation plans and validate closure with evidence; write detailed findings.

Skills

Audit management

Information security audits

Regulatory compliance

Communication skills

Program management

Cloud security

Education

Bachelor’s degree in Computer Science, Computer Engineering, Information Systems or related field

Tools

Audit Management tools

Security tools

Job description

Five Rivers IT, Inc. in the NYC metro area seeks a Senior IT Security Compliance Analyst to lead audits, drive governance, risk and compliance initiatives across multiple client environments in a managed services setting.

You will coordinate with auditors and engineering, implement security controls, and mentor teams while supporting incident management and remediation efforts. Strong background in SOC 2, ISO 27001, PCI DSS, HIPAA preferred.