Senior Cyber Security Risk and Compliance Analyst
Core
Manage SOC 1, 2 & 3 audit preparations, oversee internal/IT controls testing, and act as a trusted security advisor to identify gaps and recommend solutions.
Role type
Senior Cyber Security Risk and Compliance Analyst
Builds
Audit programs, risk acceptance controls, and compliance frameworks (SOC, HIPAA, PCI, ISO 27001)
Domain
Cybersecurity, Compliance, Risk Management
Deliverable
dashboards & analysis
Required skills
SOC audit management, compliance framework knowledge, risk assessment, project management, stakeholder communication
Preferred skills
Audit firm/Big 4 experience, security risk evaluation
Technologies
SOC 1, SOC 2, SOC 3, HIPAA, PCI, ISO 27001, AICPA Trust Services Criteria
Responsibilities
Manage SOC 1, 2 & 3 audit preparatory processes and oversee related testing activities; Facilitate external audits and ensure compliance with requirements; Manage risk acceptance requests including review, analysis, and mitigation; Provide technical expertise and training to direct reports and partners; Communicate audit results and analysis to stakeholders and senior management.
Seniority
Senior, hands-on IC