Security Jobs

CSO Wanted

» Post A Job » View All Jobs

Compliance Analyst

HOPS International/TRAPSystems

Miami Lakes,Fl

Job Description

Reports:

Reporting To: SVP Information Systems

Department: Information Systems

Opportunity:

This role is responsible for monitoring compliance with internal control policies and procedures in accordance with the requirements of PCI-DSS, HIPPA, BPSSM and other regulatory and industry requirements. Must be able to work with the various IT and business organizations to suggest process changes.

Responsibilities:

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Perform monitoring assessments of the controls to validate that controls are operating effectively throughout the year. They will also validate that the framework implemented is adhered to appropriately.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Perform self-audits on a rotational basis throughout the year to ensure that the organization remains compliant.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Proactively identify potential gaps within the organization in areas such as regulatory and industry compliance requirements as well as client SLA and contractual performance obligations. These gaps must then be identified and communicated to the appropriate stakeholders.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Collecting, tracking, and reporting on key organizational performance metrics throughout the organization.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Conduct internal audits and work with external audit entities to provide necessary documentation and assistance with the audit engagement.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ The Candidate will lead and/or conduct audits in accordance with (PCI-DSS), BPSSM, SAS70 and any additional external client based audits.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ In addition to performing these periodic reviews, the candidate will develop and execute plans to identify program susceptibilities, communicate findings to all relevant stakeholders, and promptly and effectively work with the various teams to resolve technical, procedural, and organizational shortcomings.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Maintain central repository of documentation and artifacts of process outputs related to IT policies and procedures. Review policies, procedures, and artifacts for completeness and accuracy.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Retain all documentation around policies, procedures, audits, and assessments.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Collect, organize, and validate audit-related materials.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Present recommendation and analysis to senior management as appropriate.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Assist in coordinating remediation activities resulting from audits while facilitating fast responses to audits. Proactively follow up on status of open issues to prevent missing target dates.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Central point of contact for compliance metrics as well as other organizational metrics.

ÃÂÃÂ¢ÃÂÃÂÃÂÃÂ¢ Work with functional areas to standardized policy, procedures and related technical documentation.

RESOURCE CENTER

buy a link »

Requirements

Requirements:

Minimum 10 years software development experience, 5 of which were spent managing software development teams.

Detailed working knowledge and experience with the controls within one or more of the following areas: PCI-DSS, BPSSM, HIPPA

Experience in coordinating or conducting SAS70 Type 2 audits.

Working knowledge of Governance, Risk & Compliance issues in Healthcare or the Financial Services sectors

Technical knowledge and/or experience in key technologies such as Windows, Unix, Data networking and database management systems.

Must possess excellent written and verbal communication skills to support the documentation, reporting and presentation requirements of the position.

Firm grasp of security best practices standards such as those outlined in OWASP and NIST 800-53, CISSP, CISM, or CISA certification required.

Must be self-motivated and able to juggle competing priorities with great organizational skills Ability to coordinate deadlines, tasks, and milestones across multiple departments and technology teams.

Technical IT and audit\compliance knowledge background.

Knowledge of IT processes and Infrastructure.

Must be results oriented with project management skills.

The ideal candidate will have 4-6 years experience in one of the following areas, compliance, information security, or systems audit/analysis.

Excellent interpersonal, organizational, and time management skills

Four-year Degree in Computer Science or related field.

CISSP, CISM, or CISA certification required.

Six Sigma knowledge/certification a plus.