Sr. Information Security Analyst
ValonSalary not specified
Full Time
Senior (5 to 8 years)
Not SpecifiedCompensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
N/AIndustries
Requirements
- Bachelor’s degree in Information Systems, Business Management, Computer Science, Engineering, Accounting, Finance, Audit or related discipline; or equivalent experience
- Professional certification(s) (CISA, Security+, MCSE, CNA/CNE, CISSP) an asset
- 7+ years working in a security and compliance related operational environment with a strong focus on SOX IT compliance and SOC reporting
- Experience as a Sr. Security Analyst and Sr. Security Engineer; or equivalent
- Work independently, demonstrate initiative, adapt to change, engage in collaborative thinking, and maintain attention to detail
- Evaluate risks, impacts and controls and promote a positive work environment
- Deep knowledge (incomplete in description, but implied as required skill)
Responsibilities
- Create a team environment where staff members work together for the good of the team (20% Leadership)
- Collaborate with Security Manager to propose and implement improvements (20% Leadership)
- Promote new ideas and process improvements from staff; document and present to management (20% Leadership)
- Work closely with other Leads to ensure all groups are working under the same guidelines (20% Leadership)
- Provide feedback and participate in performance reviews with Manager (20% Leadership)
- Address concerns from staff members engaging other Leads or Managers (20% Leadership)
- Assist Manager on department strategy, roadmap and operational plan (20% Leadership)
- Coach and direct Security Administrators, Sr. Security Administrators, Security Analysts and Sr. Security Analysts (20% Leadership)
- Lead SOX IT Compliance: Oversee all SOX IT compliance efforts, ensuring controls are designed, implemented, and tested effectively (60% Managing workflow)
- SOC Reporting: Coordinate SOC 1, SOC 2, and other required SOC reporting, ensuring audits are completed timely and accurately, with findings remediated (60% Managing workflow)
- Evidence Management: Coordinate with various internal departments to gather SOX IT and SOC documentation and evidence (60% Managing workflow)
- Control Documentation and Testing: Develop, update, and maintain control documentation for SOX IT and SOC, including risk assessments, process narratives, and control matrices; support preparation, review, and validation of control testing, track findings, and drive remediation (60% Managing workflow)
- Collaborate with Internal & External Auditors: Work closely to facilitate SOX and SOC audits, ensure audit readiness, address issues, and develop remediation plans (60% Managing workflow)
- Project Management: Oversee complex SOX IT projects, ensuring compliance with IT security policies and standards while coordinating timelines, resources, and deliverables (60% Managing workflow)
- Regulatory Compliance Oversight: Monitor and manage IT security compliance requirements, remaining current on regulatory changes affecting SOX and SOC reporting (60% Managing workflow)
- Continuous Improvement: Identify and implement improvements for SOX IT and SOC processes, focusing on reducing compliance costs, improving control environments, and optimizing testing procedures (60% Managing workflow)
- Frequent meetings with team members (30% Administrative)
- Conduct weekly status meeting with Manager (30% Administrative)
- Provide feedback on performance plans (30% Administrative)
- Ensure metrics are monitored, updated and reported to Manager (30% Administrative)
- Assume accountability for directing others toward appropriate learning opportunities in both technical and related competency areas (30% Administrative)
- Coach, direct and mentor Security Administrators, Sr. Security Administrators, Security Analysts, Sr. Security Analysts (30% Administrative)
Skills
Key technologies and capabilities for this role
Questions & Answers
Common questions about this position
What is the salary for the Lead Security Compliance Analyst position?
This information is not specified in the job description.
Is this a remote position, or what is the location requirement?
This information is not specified in the job description.
What key skills and responsibilities are required for this role?
The role requires expertise in overseeing SOX IT compliance, managing SOC 1 and SOC 2 audits, control documentation and testing, evidence management, project management, and collaboration with auditors.
What does the team environment and leadership look like at Assurant for this role?
The role involves creating a collaborative team environment, coaching Security Administrators and Analysts, working closely with other Leads and the Security Manager, promoting process improvements, and participating in performance reviews.
What makes a strong candidate for the Lead Security Compliance Analyst role?
Strong candidates will have leadership experience in compliance, proven ability to manage SOX IT and SOC audits, skills in control testing and remediation, project management, and a focus on continuous process improvements.
Assurant
Provides risk management and insurance solutions
About Assurant
Assurant provides risk management solutions that focus on protecting major consumer purchases, particularly in mobile devices, electronics, and smart technology. The company offers insurance products and extended service contracts that help consumers safeguard their investments in high-value items. When a product is damaged or malfunctions, Assurant also provides repair services to restore it efficiently. This approach helps clients minimize financial losses from unexpected events. Assurant generates revenue through the sale of insurance policies, service contracts, and repair services. Unlike many competitors, Assurant emphasizes diversity, equity, and inclusion within its corporate culture, which enhances its ability to serve a diverse customer base. The company's goal is to support consumers and businesses in maintaining their day-to-day operations while protecting their investments.
New York City, New YorkHeadquarters
1892Year Founded
IPOCompany Stage
Financial Services, Consumer GoodsIndustries
10,001+Employees
Benefits
Health Insurance
Hybrid Work Options
Professional Development Budget
Risks
Integration challenges from acquiring iSmash may affect operational efficiency.
Regulatory scrutiny from acquiring American Lease Insurance could pose compliance challenges.
Cultural clashes from acquiring American Financial & Automotive Services may impact operations.
Differentiation
Assurant specializes in risk management for mobile devices and electronics globally.
The company offers insurance, service contracts, and repair services for high-value items.
Assurant's DEI commitment fosters innovation and enhances customer understanding.
Upsides
Increased demand for mobile device insurance due to remote work trends.
5G expansion drives demand for new devices and related insurance products.
Acquisition of iSmash enhances Assurant's tech repair service capabilities.
Related Jobs
RemoteRemoteDirector, SOX Compliance
Omada HealthSalary not specified
RemoteSenior Manager, Technical Accounting and Financial Reporting
LimeSalary not specified
RemoteIT Risk & Compliance Analyst
AngiSalary not specified
RemoteSr. Audit Manager
M&T BankSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteInternal Audit Lead
Kraken$127,000 - $203,000/year
- Full Time
- Expert & Leadership (9+ years)
RemoteCompliance Manager
Danaher CorporationSalary not specified
RemoteRegulatory & Security Compliance Analyst
RainSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemoteGRC (Governance, Risk, and Compliance) Analyst
YipitDataSalary not specified
- Full Time
- Entry Level & New Grad
RemoteSenior GRC Analyst
TinesSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteIT Analyst, Remote
ZūmSalary not specified
RemoteInformation Security Compliance Analyst
BonterraSalary not specified