Job Title Regulatory/Industry Information Security Business Analyst
Location: Remote (EST time zone)
Requirement:
JD:
Role Responsibilities:
- Review and interpret detailed regulatory/industry information security requirement(s)
- Review evidence (including documents and artifacts) to determine validity as proof of compliance with requirement(s)
- Work directly with SMEs/providers of evidence to clarify evidence gaps or weaknesses
- Provide clear and concise written results of review
Qualifications:
- Background in information security
- Demonstrated aptitude for understanding and interpreting regulatory/industry frameworks
- Experience conducting QC/QA or compliance testing
- Experience conducting control testing (not a must but a nice to have)
Skills:
- Ability to draw insights/interpret from written requirements in order to align them against compliance evidence
- Detail oriented
- Ability to make associations across multiple documents
- Ability to work in a highly matrixed environment with various levels of authority
- Ability to communicate effectively and concisely