REMOTE - Security Compliance Policy Analyst
Beacon Hill Staffing Group, LLC

Looking for similar profile to what is listed below but more junior. HM is not looking for a cybersecurity compliance expert but having the basic knowledge of security controls and compliance is a requirement. Need to be able to speak to experience-driven examples of the basic security control frameworks (NIST, ISO, HIPAA) to demonstrate knowledge.

Main responsibilities will be to analyze and write policies based on NIST frameworks

The Cybersecurity Compliance Analyst will help define, implement, manage, and maintain cybersecurity compliance to meet or exceed requirements for in-scope security, legal, and regulatory frameworks. This role will be responsible for leading the cybersecurity compliance efforts for the enterprise as well as continuing the advancement of the compliance program. This is a multi-dimensional role, requiring cybersecurity compliance and business integration experience with proven capability in both technical skills and cultural awareness to build partnerships and provide best-in-class compliance management and support.

Essential Duties

Include, but are not limited to, the following:

• Lead cybersecurity compliance initiatives for Exact Sciences that include coordinating internal and external cybersecurity compliance audits, scheduling meetings, gathering evidence, managing timelines and advising stakeholders.
• Perform professional day-to-day execution of cybersecurity compliance activities, internal/external audit engagements and projects that focus on customer service and support.
• Build partnerships and collaborate with colleagues across all levels by providing cybersecurity compliance and audit support, evidence collection and validation, control enhancement, and process improvement recommendations.
• Assist in the creation of compliance procedures, guidelines, control narratives and work instructions.
• Conduct gap analyses, review audit results, and participate in the identification of root causes to support and monitor remediation plans, recommend preventive actions, and report metrics.
• Monitor cybersecurity control processes developed to ensure adherence to compliance guidelines, internal policies, and regulatory requirements, including SOX, HIPAA, FDA, HITRUST, PCI-DSS, etc.
• Act as a subject matter expert (SME) for cybersecurity compliance related procedures, requirements, and audit activities.
• Work with leadership to prioritize compliance initiatives to align with business objectives.
• Assist with the continued advancement of the cybersecurity compliance program through the review of IT process narratives, compliance awareness efforts, process improvement strategies and risk and control mapping.
• Support business enablement objectives in alignment with cybersecurity compliance best practices and regulatory requirement.
• Must be able to take initiative, be dependable, and work with little supervision while being resilient to change.
• Uphold company mission and values through accountability, innovation, integrity, quality, and teamwork.
• Support and comply with the company's Quality Management System policies and procedures.
• Maintain regular and reliable attendance.
• Ability to act with an inclusion mindset and model these behaviors for the organization.
• Ability to travel 5% of working time away from work location, may include overnight/weekend travel.
• Perform other cybersecurity compliance related tasks as needed.

Minimum Qualifications

• Bachelor's degree in information technology, business, or related field; or high school degree/general education diploma (GED) and 4 years of relevant experience in lieu of bachelor's degree.
• Prior experience and knowledge of regulatory requirements and control frameworks (e.g., SOX, HIPAA, HITRUST, PCI-DSS, ISO 27001, FDA, NIST 800-53.
• Demonstrated ability to perform the essential duties of the position with or without accommodation.
• Authorization to work in the United States without sponsorship.

Preferred Qualifications

• Excellent interpersonal and communication skills.
• Demonstrated ability to operate in a cross cultural and complex matrix environment with the ability to build consensus across functions.
• Prior experience working in an audit-related role with an emphasis on cybersecurity compliance, operations and/or security controls.
• Cybersecurity certification (CISA, CRISC, CISM, CISSP, Security +, CC)

Beacon Hill is an Equal Opportunity Employer that values the strength diversity brings to the workplace. Individuals with Disabilities and Protected Veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/

Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Company Profile:

Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.

Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.

Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com .

We look forward to working with you.

Beacon Hill. Employing the Future™

---