security compliance specialist

<div><div><b>We help the world run better</b><br>
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging &ndash; but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.</div><p></p><p><br>
We are seeking qualified security consultancy services to augment our security architecture validation capabilities and support the development of our threat modeling initiatives for the upcoming contract period. The selected vendor will collaborate closely with our internal security teams and business units to ensure robust compliance with organizational security policies, industry standards, and regulatory requirements.</p><p></p><p><b><br>
WHAT YOU&rsquo;LL DO:</b></p><p></p><ul><li><br>
Review and analyze existing security architecture documents</li><li>Validate security architectures against established SAP policies and standards</li><li>Assess compliance gaps and provide recommendations for remediation</li><li>Ensure alignment with industry best practices and regulatory requirements</li><li>Plan, facilitate, and conduct threat modelling workshops, following STRIDE</li><li>Serve as Lead or Co-Lead facilitator for workshop sessions</li><li>Identify potential security threats and vulnerabilities within system designs</li><li>Collaborate with cross-functional teams including architects, developers, and security personnel</li></ul><p></p><p><b><br>
WHAT YOU&rsquo;LL BRING:</b></p><p></p><ul><li><br>
Demonstrated expertise as a Security Professional/Security Expert</li><li>Proven experience in security architecture review and validation</li><li>Hands-on experience conducting threat modelling using STRIDE methodology</li><li>Strong analytical and problem-solving capabilities</li><li>Excellent written and verbal communication skills</li><li>Experience presenting to technical and executive audiences</li></ul><p></p><p><br>
Optional, but preferred</p><ul><li>Knowledge of SAP software and solutions architecture</li><li>Familiarity with SAP security frameworks and best practices</li><li>Previous experience working in enterprise SAP environments</li></ul><p></p><p><b><br>
MEET THE TEAM:</b></p><p></p><p><br>
SAP CPIT develops, operates and maintains a diverse set of applications and services. The technology portfolio ranges from SAP's proprietary software solutions, including BTP (Business Technology Platform), ABAP Systems, SuccessFactors, and other enterprise applications, to solutions developed and deployed across the four leading hyperscalers (AWS, Azure, GCP, and Alibaba Cloud), as well as the integration of third-party systems and hybrid architectures.</p><p></p><p><br>
SAP CPIT Security maintains a dedicated team that conducts comprehensive technical architecture reviews for every team within CPIT, evaluating designs against compliance and regulatory criteria. This includes adherence to SAP's internal Policy Framework and Product Standards, as well as applicable industry regulations, data protection laws, and jurisdiction-specific requirements relevant to each use case.</p><p></p><div><b><br>
Bring out your best</b><br>
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.
<br>
<br>
<b>We win with inclusion</b><br>
SAP&rsquo;s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone &ndash; regardless of background &ndash; feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.<br>
<br>
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.<br>
<br>
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.</div><div><br>
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.</div><div></div><div><b><br>
Compensation Range Transparency</b>: SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP&rsquo;s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 144500 - 245600(USD) USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.</div><div><b><br>
AI Usage in the Recruitment Process</b></div><div>
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
</div><div>Please note that any violation of these guidelines may result in disqualification from the hiring process.<br>
<br>
Requisition ID: 445519 | Work Area: Information Technology | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid</div></div>

Info Security Compliance Sr Specialist

NORC at the University of Chicago

<div><div><div><div><div><b>JOB SUMMARY:</b></div>
<div>
<div><p>NORC at the University of Chicago is seeking a seasoned IT Risk and Compliance Specialist to join our Information Technology Department within the DSS Security and Compliance team. This critical role will focus on driving the organization&rsquo;s adherence to complex regulatory frameworks, with particular emphasis on FedRAMP, CMMC, NIST 800-171, and ISO 27001. The ideal candidate will bring a wealth of experience in auditing, risk management, and compliance within high-stakes environments, particularly for Government security standards.</p>
<p><i>
Preferably, this position will have a hybrid work schedule of one or two days a week in either our Washington, DC or Chicago, IL office. Remote applicants may also be considered.</i></p></div><br>
</div>
</div><br>
<div><div><b>DEPARTMENT: </b><b>DSS Security and Compliance</b></div>
<div>
<div><p>Technology is integral to NORC&rsquo;s mission of advancing social science research. The IT department delivers innovative, high-quality solutions that support both our staff and clients, ensuring the highest standards of security and compliance.</p></div><br>
</div>
</div><br>
<div><div><b>RESPONSIBILITIES:</b></div>
<div><ul><li>Lead comprehensive internal and external IT compliance audits, ensuring alignment with critical security standards such as FedRAMP, CMMC, NIST 800-171, and ISO 27001.</li>
<li>Execute in-depth risk assessments and security impact analyses of information systems, identifying potential vulnerabilities and proposing mitigation strategies.</li>
<li>Develop, review, and manage key audit documentation, including the creation of corrective action and remediation plans to address identified deficiencies.</li>
<li>Oversee and ensure continuous compliance with contract requirements, with a focus on tracking and reporting the progress of Corrective Action Plans (CAPs).</li>
<li>Collaborate closely with Security Engineers and stakeholders to remediate compliance issues, ensuring alignment with regulations such as FISMA, Section 508, NIST SP 800-53, HITRUST, and HIPAA Security &amp; Privacy standards.</li>
<li>Design, implement, and optimize policies, procedures, and automated processes for compliance in hybrid and multi-tenant infrastructures.</li>
<li>Provide mentorship and strategic guidance to IT teams, translating complex regulatory requirements into actionable technical steps for seamless compliance execution.</li>
<li>Foster strong, collaborative relationships with NORC&rsquo;s research community and other key stakeholders, facilitating a culture of compliance and security.</li>
</ul>
</div></div><br>
<div><div><b>REQUIRED SKILLS:</b></div>
<div><ul><li>Bachelor&rsquo;s Degree in Management Information Systems, Computer Science, Business Administration, or a related field. Or equivalent experience in IT security, risk, or compliance may be considered.</li>
<li>Current certifications in IT security compliance, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).</li>
<li>Minimum of 6+ years of experience in IT security auditing, risk assessment, or compliance, with a primary focus on government security frameworks and contracts.</li>
<li>Proven expertise in auditing IT systems for compliance with security frameworks, including preparing and reviewing System Security Plans (SSPs), Corrective Action Plans (CAPs), and Contingency Plans.</li>
<li>Proficiency in Governance, Risk, and Compliance (GRC) or Information Risk Management (IRM) systems, with a track record of managing compliance across multiple frameworks, including FedRAMP, NIST, and ISO standards.</li>
<li>Deep knowledge of information security protocols across infrastructure layers, including networks, servers, databases, and applications, with hands-on experience in advanced security assessment techniques.</li>
<li>Experience managing compliance in hybrid and multi-tenant infrastructures, with strong familiarity with privacy regulations such as GDPR, CCPA/CPRA, and the HIPAA Privacy Rule.</li>
<li>Extensive experience in the implementation and oversight of frameworks such as FedRAMP, CMMC, NIST 800-171, ISO 27001, and HITRUST.</li>
</ul><i>Qualified applicants must be eligible to work in the U.S. We regret that we are unable to offer visa sponsorship for this position.</i></div>
</div><br>
<div><div><b>SALARY AND BENEFITS:</b></div>
<div>
<div><p>The pay range for this position is $110,000 &ndash; $165,000.</p>
</div>
<div><p>This position is classified as regular. Regular staff are eligible for NORC&rsquo;s comprehensive benefits program. Benefits include, but are not limited to:</p>
</div>
<div><div><ul><li><p>Generously subsidized health insurance, effective on the first day of employment</p>
</li>
<li><p>Dental and vision insurance</p>
</li>
<li><p>A defined contribution retirement program, along with a separate voluntary 403(b) retirement program</p>
</li>
<li><p>Group life insurance, long-term and short-term disability insurance</p>
</li>
<li><p>Benefits that promote work/life balance, including generous paid time off, holidays; paid parental leave, bereavement leave, tuition assistance, and an Employee Assistance Program (EAP).</p>
</li>
</ul> </div></div><div><p><i>NORC&rsquo;s Approach to Equity and Transparency</i></p>
</div>
<div><p><i>Pay and benefits transparency helps to reduce wage gaps. As part of our commitment to pay equity and salary transparency, NORC includes a salary range for each job opening along with information about eligible benefit offerings. At NORC, we take a comprehensive approach to setting salary ranges and reviewing raises and promotions, which is overseen by a formal Salary Review Committee (SRC).</i></p></div><br>
</div>
</div><br>
<div><div><b>WHAT WE DO:</b></div>
<div>
<p>NORC at the University of Chicago is an objective, non-partisan research institution that delivers reliable data and rigorous analysis to guide critical programmatic, business, and policy decisions. Since 1941, our teams have conducted groundbreaking studies, created and applied innovative methods and tools, and advanced principles of scientific integrity and collaboration. Today, government, corporate, and nonprofit clients around the world partner with us to transform increasingly complex information into useful knowledge.</p></div><br>
</div><br>
<div><div><b>WHO WE ARE:</b></div>
<div>
<p>For over 80 years, NORC has evolved in many ways, moving the needle with research methods, technical applications and groundbreaking research findings. But our tradition of excellence, passion for innovation, and commitment to collegiality have remained constant components of who we are as a brand, and who each of us is as a member of the NORC team. With world-class benefits, a business casual environment, and an emphasis on continuous learning, NORC is a place where people join for the stellar research and analysis work for which we&rsquo;re known, and stay for the relationships they form with their colleagues who take pride in the impact their work is making on a global scale.</p></div><br>
</div><br>
<div><div><b>EEO STATEMENT:</b></div>
<div>
<p>NORC is an equal opportunity employer. NORC evaluates qualified applicants without regard to race, color, religion, sex, gender, national origin, disability, status as a protected veteran, sexual orientation, and other legally protected characteristics.</p>
<p>
#LI-MS1</p></div></div></div></div></div><p></p>

IT Risk and Compliance Specialist - Hybrid Chicago Loop Office or Remote

Urban sky

<div><div><p><b>About Urban Sky:</b></p>
<p>
Urban Sky is a venture-backed aerospace startup that pioneers utilization of the stratosphere and reimagines the way humans view and analyze the earth. We design, build, operate, and sell stratospheric balloon systems, and the data we collect supports a wide range of applications, from real-time wildfire monitoring to urban mapping. Our technology is also employed by government customers including the Department of Defense (DoD), NASA, and others. Urban Sky sends flight vehicles to the stratosphere on a weekly basis.</p>
<p>
Our team consists of engineers, makers, developers, and doers who believe in the power of human potential when passion meets utility within a small, supportive team. At Urban Sky we strive to create a team culture grounded in candor, inclusion, respect and empowerment.</p>
<p>
We aim to build the next chapter of stratospheric history in Denver and are seeking self-starting, open-minded, and hard-working team members.</p></div><p><b>
The Role</b></p>
<p>
We're looking for a Network Engineer &amp; Data Security Specialist who can own the full networking and security compliance stack across Urban Sky's stratospheric platforms and ground systems. You'll be the person who makes our systems fly on approved networks&mdash;literally.</p>
<p>
This role sits at the intersection of hands-on network engineering and government security compliance. You'll help architect and maintain the networking infrastructure that connects our Urban Sky-designed Husky Bus platform to a wide range of payloads communicating over different radio systems&mdash;from satellite links to tactical radios with various routing equipment, VPNs, and network paradigms. Each mission and event can present unique networking challenges that require creative, on-the-fly solutions.</p>
<p>
Equally important, you'll lead and drive our government security compliance efforts, particularly the IATT and ATO process. Urban Sky has been issued several IATTs in the past, so there's a strong foundation to build on. You'll work to not only create compliant structures but also build CI/CD pipelines that are themselves approved&mdash;so our products can continue to improve after they're authorized. This means working through STIGs, ACAS scans, security architecture documentation, and coordinating directly with government cybersecurity leads.</p>
<p>
This role will involve significant travel supporting various events, exercises, and customer engagements where you'll solve unique networking challenges in the field. If you're the kind of person who gets energy from being hands-on in new environments and figuring things out in real time, you'll love this.</p>
<p><b>
What You'll Do</b><br>
<br>
Network Engineering:</p>
<ul>
<li>Design, deploy, and maintain networking infrastructure for the Husky Bus platform and its payloads</li>
<li>Configure and manage routers, switches, VPNs, firewalls (including Palo Alto), and network segmentation for both on-site and field-deployed systems</li>
<li>Solve novel networking challenges at field events and exercises&mdash;each deployment may involve different radio systems, routing paradigms, and connectivity constraints</li>
<li>Support integration of customer payloads onto the Husky Bus, ensuring reliable network connectivity across air-to-ground, air-to-space and air-to-air links</li>
<li>Build and document network architectures that are flexible enough to support rapidly evolving mission requirement</li>
</ul>
<p>Security &amp; Compliance:</p><br>
<ul>
<li>Own and drive the IATT and ATO process end-to-end, building on Urban Sky's existing IATT foundation and lessons learned from Army and other DoD engagements. There will be lots of support from the IT team, the software team and the firmware team, but you will own the network.</li>
<li>Conduct and manage STIG reviews, ACAS/Nessus vulnerability scans, and remediation across bus compute systems, cameras, and other networked components</li>
<li>Coordinate directly with government cybersecurity leads (e.g., MDO Live Cyber Security, C5ISR Center) on compliance artifacts, scan submissions, and risk acceptance packages</li>
<li>Develop and maintain security documentation including system security plans, network diagrams, and compliance evidence packages</li>
<li>Build approved CI/CD pipelines so that products can continue to be improved after authorization&mdash;compliance shouldn't mean the product freezes</li>
</ul>
<p>AI-Assisted Operations:</p>
<ul>
<li>Use AI tools daily to accelerate compliance documentation, network analysis, vulnerability remediation, and configuration management</li>
<li>Build AI into production workflows&mdash;not just prototyping. AI will be an integral part of how you do this job. Before AI this job would not have been possible by just one person</li>
<li>Stay current with evolving AI capabilities and continuously find new ways to apply them to security and networking challenges</li>
</ul>
<p><b>Who We're Looking For</b></p>
<p>
This is a senior, hands-on role. We're optimizing for experience, speed, and adaptability.</p>
<p>
You Likely Have:</p>
<ul>
<li>5+ years of experience in network engineering, IT security, or a related field</li>
<li>Deep hands-on expertise with VPNs, routers, switches, firewalls, and network architecture&mdash;you can configure, troubleshoot, and design from scratch</li>
<li>Direct experience with the government IATT process&mdash;you have taken at least one system through a full IATT end-to-end and have seen the ATO process</li>
<li>Familiarity with STIGs, ACAS/Nessus scanning, and DoD cybersecurity compliance frameworks (RMF, NIST 800-171)</li>
<li>Experience working with or supporting DoD/military customers on network security</li>
<li>Comfort working across satellite communications, tactical radio networks, and conventional IP networking</li>
<li>Strong documentation skills&mdash;you can produce the compliance artifacts that government reviewers need</li>
</ul>
<p> You Probably Enjoy:</p><br>
<ul>
<li>Startup environments where you wear many hats and move fast</li>
<li>Field work, travel, and solving problems in new and challenging environments</li>
<li>Building systems that are both compliant AND capable of continuous improvement</li>
<li>Using AI aggressively to multiply your output</li>
<li>Working autonomously with real ownership of outcomes</li>
</ul>
<p><b>Nice-To-Haves</b></p>
<ul>
<li>Familiarity with Tailscale or similar mesh networking solutions</li>
<li>Experience with CI/CD pipeline design and DevSecOps practices</li>
<li>Background in aerospace, defense, or other highly regulated industries</li>
<li>Familiarity with CUI/SBU data handling requirements</li>
</ul>
<p><b>Benefits:</b></p>
<ul>
<li>Medical, Vision and Dental</li>
<li>Unlimited Vacation Days</li>
<li>Parental Leave</li>
<li>Cell Phone Bill Stipend</li>
<li>Stock Options</li></ul><p></p><div><p><b><br>
NOTE: </b>Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes that they have the skills and the passion necessary to succeed here to apply for this role.</p>
<p>
This position may require the candidate to deal with commodities, software, technology, defense articles, and/or technical data which are subject to the Export Administration Regulations and/or the International Traffic in Arms Regulations. Additional information may be requested so as to determine whether export authorization is required from the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls. If authorization is required, employment will be contingent upon the Company successfully obtaining such authorization from the relevant government agency.</p>
<p><i>
Urban Sky is an equal opportunity employer, and we value diversity. All employment is decided on the basis of qualifications, merit, and business need.</i></p></div></div><p></p>

Network Engineer & Data Security Specialist

IT Risk and Compliance Specialist - Hybrid Washington DC Office or Remote

Naryan Consultant

<p>security compliance manager experience service man required pharma industry zirakpur knowledge of security computer immidate joining salary 60k resume 7347087229</p><p>Job Type: Full-time</p><p>Pay: Up to ₹65,683.38 per month</p><p>Work Location: In person</p>

security compliance manager

Stellar Hunters

<div><p>We are seeking a detail-oriented and strategically minded <b>Information Security Compliance Analyst</b> to join our security and risk team. The ideal candidate will support the development, implementation, and maintenance of information security compliance programs, frameworks, and controls; ensure alignment with applicable regulatory and contractual requirements; and collaborate with IT, engineering, legal, and business stakeholders to reduce risk and demonstrate compliance. This role requires hands-on compliance experience, strong knowledge of security frameworks and standards, excellent documentation skills, and the ability to communicate technical requirements to non-technical audiences.</p><h3 class="jobSectionHeader"><b>
Key Responsibilities for Information Security Compliance Analyst</b></h3><ul><li><p>
Implement, maintain, and monitor information security compliance programs and control frameworks (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, HIPAA) to ensure ongoing alignment with regulatory, contractual, and business requirements.</p></li><li><p>
Manage and execute internal compliance assessments, risk assessments, and control testing; document findings, track remediation activities, and verify corrective actions.</p></li><li><p>
Support third-party security assessments and vendor risk management processes, including intake questionnaires, evidence collection, review of results, and coordination of mitigation plans with vendors and internal stakeholders.</p></li><li><p>
Coordinate and support external audits and certification efforts (e.g., SOC 2 audits, ISO certifications, regulatory reviews), serving as a primary point of contact for auditors and external assessors.</p></li><li><p>
Develop, maintain, and update security policies, standards, procedures, and control matrices; ensure documentation is current, accessible, and mapped to applicable frameworks and requirements.</p></li><li><p>
Collect, analyze, and report compliance metrics and status to security leadership and cross-functional partners; prepare evidence packages and executive-ready reports demonstrating control effectiveness and remediation progress.</p></li><li><p>
Collaborate with Information Security, IT operations, engineering, legal, and business teams to interpret compliance requirements, integrate controls into processes and systems, and advise on remediation or compensating controls.</p></li><li><p>
Stay informed of changes in privacy, security, and regulatory landscapes; evaluate impacts to the organization and recommend required updates to policies, controls, or compliance programs.</p></li><li><p>
Provide training and awareness sessions for employees on security compliance topics, control responsibilities, and evidence collection best practices.</p></li></ul><h4 class="jobSectionHeader"><b>
Required Qualifications - Skills &amp; Experience</b></h4><ul><li><p>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Risk Management, or related field, or equivalent experience.</p></li><li><p>
3+ years of experience in information security compliance, audit, risk management, or related roles within technology-driven or regulated organizations.</p></li><li><p>
Practical knowledge of common security frameworks and standards (e.g., SOC 2, ISO 27001, NIST CSF, PCI-DSS) and experience mapping controls to requirements.</p></li><li><p>
Experience performing control testing, risk assessments, vendor security reviews, and preparing evidence for audits or certifications.</p></li><li><p>
Strong written and verbal communication skills; ability to produce clear policy and procedure documentation and present compliance status to technical and non-technical stakeholders.</p></li><li><p>
Familiarity with security and compliance tooling (e.g., GRC platforms, SIEM, vulnerability management, ticketing/ITSM systems) and proficient with Excel or similar data analysis tools.</p></li><li><p>
Excellent organizational skills and attention to detail, with the ability to manage multiple priorities, deadlines, and cross-functional projects.</p></li></ul><h4 class="jobSectionHeader"><b>
Preferred Qualifications - Certifications &amp; Tools</b></h4><ul><li><p>
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar are preferred.</p></li><li><p>
Experience supporting SOC 2 or ISO 27001 audits, or leading vendor risk and third-party assessment programs.</p></li><li><p>
Familiarity with cloud security controls and compliance in AWS, Azure, or GCP, and experience working with DevOps/engineering teams to embed controls into CI/CD pipelines.</p></li><li><p>
Prior experience with GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust, Drata) or automation of compliance evidence collection is a plus.</p></li></ul><h5 class="jobSectionHeader"><b>
Work Environment &amp; Compensation</b></h5><ul><li><p>
Full-time position with an onsite work model.</p></li><li><p>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li><li><p>
Opportunities for professional development, continuing education support, and assistance with certification costs.</p></li><li><p>
Collaborative and inclusive team culture committed to diversity, equity, and professional growth.</p></li></ul></div>

Information Security Compliance Analyst

Father Joe's Villages

<div><p><b>Cybersecurity Compliance Analyst</b></p><p><b>
Information Technology Department</b></p><p>
At Father Joe&rsquo;s Villages, protecting client and organizational data is essential to sustaining trust, compliance, and operational excellence. The Information Technology team safeguards sensitive systems and information across on-premises, cloud, and SaaS environments to ensure the confidentiality, integrity, and availability of data that supports our mission to end homelessness.</p><p>
T<b>he Role</b></p><p>
As a Cybersecurity Compliance Analyst, you will strengthen the organization&rsquo;s cybersecurity posture by combining hands-on security operations with structured compliance and risk management practices. You will monitor threats, support incident response, manage vulnerability remediation efforts, and maintain alignment with regulatory requirements including HIPAA, PCI-DSS, and HUD/HMIS standards.</p><p>
This role is ideal for a technically skilled and detail-oriented professional who is motivated by protecting mission-critical systems while ensuring ongoing compliance in a regulated environment.</p><p>
 <b>Your Role in Strengthening Security and Compliance</b></p><ul><li>
Monitor endpoint, cloud, and SaaS environments for security threats using centralized monitoring and detection tools.</li><li>
Deploy, configure, and maintain endpoint protection and cloud security solutions.</li><li>
Investigate security alerts, anomalous activity, and potential data misuse or exfiltration.</li><li>
Support vulnerability scanning, remediation tracking, and secure configuration practices aligned with CIS and NIST standards.</li><li>
Maintain documentation, policies, procedures, and evidence required for HIPAA, PCI-DSS, and HUD/HMIS compliance.</li><li>
Support internal and external audits, vendor risk assessments, and control validation activities.</li><li>
Participate in incident response activities including detection, containment, recovery, and post-incident analysis.</li><li>
Develop security metrics, reports, and risk summaries for leadership and audit purposes.</li><li>
Identify opportunities to improve security controls, automation, and operational efficiency.</li><li>
Complete required trainings and perform other related duties as assigned.</li></ul><p><b>
Desirable Candidate Profile</b></p><p><b>
Minimum Requirements</b></p><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent combination of education and relevant experience.</li><li>
Minimum of three (3) years of experience in cybersecurity operations, cloud security, compliance-focused security, or related technical roles.</li><li>
Experience supporting regulated or compliance-driven environments (e.g., HIPAA, PCI-DSS, HUD/HMIS, or similar frameworks).</li><li>
Experience working with security tools such as endpoint detection and response (EDR/XDR), SIEM platforms, vulnerability management tools, or cloud security controls.</li></ul><p>
 <b>Key Competencies and Experience</b></p><p><b>
 </b><b>Knowledge &amp; Skills</b></p><ul><li>
Working knowledge of cybersecurity principles including threat detection, incident response lifecycle practices, and vulnerability management.</li><li>
Familiarity with regulatory frameworks such as HIPAA Security Rule, PCI-DSS, NIST Cybersecurity Framework, or similar standards.</li><li>
Experience with security monitoring tools, log analysis, and documentation of compliance evidence or audit artifacts.</li><li>
Familiarity with cloud security concepts including identity and access management and secure configuration practices.</li><li>
Abilities &amp; Ways of Working</li><li>
Ability to analyze logs, alerts, and technical findings and translate them into clear, prioritized recommendations.</li><li>
Ability to manage multiple priorities in a dynamic environment, including time-sensitive incident response or audit preparation activities.</li><li>
Strong organizational skills and attention to detail when maintaining policies, risk registers, and compliance documentation.</li><li>
Professional Attributes &amp; Behaviors</li><li>
Professional judgment and discretion when handling sensitive security and organizational information.</li><li>
Clear and effective communication with technical teams, leadership, vendors, and auditors.</li></ul><p>
 <b>Work Schedule</b></p><p>
Full-time position, typically Monday through Friday, with flexibility to support incident response, audits, or time-sensitive security matters. Occasional evening or weekend work may be required. This role may be performed in a combination of office and remote settings.</p><p><b>
Compensation and Benefits</b></p><p>
Pay for this position is based on experience, qualifications, and internal equity. The anticipated starting pay range for this role is $40.52 to $46.56 per hour.</p><p>
In addition to competitive pay, Father Joe&rsquo;s Villages offers a comprehensive benefits package, including medical, dental, and vision coverage, retirement plan options, paid time off, and professional development opportunities. Employees also have access to wellness programs and employee assistance resources to support work-life balance, health, and overall well-being.</p><p><b>
Why Join Father Joe&rsquo;s Villages</b></p><p>
Work with a mission-driven organization committed to strengthening systems that protect and empower the communities we serve. Collaborate with dedicated professionals, grow your technical expertise, and contribute to the security and resilience of critical services supporting individuals and families experiencing homelessness.</p><p><b>
Conditions of Employment</b></p><p>
Employment is contingent upon successful completion of applicable pre- and post-employment requirements, which may include background checks, system access reviews, and other role-related requirements following a conditional offer of employment.</p><p>
 <b>Equal Employment Opportunity</b></p><p>
Father Joe&rsquo;s Villages is an equal opportunity employer dedicated to building a diverse, inclusive workforce. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, veteran status, or any other characteristic protected by law.</p></div><p></p>

Cybersecurity Compliance Analyst

Search 10000+ Security compliance specialist jobs near you this March. New roles added regularly across leading industries. Apply today.