Security Compliance Analyst

Job title:

Company

Fortra

Job description

The Fortra Security Compliance Analyst responds to security and compliance requests from customers, consultants, and other external entities in the form of questionnaires, audits, and reviews. The Analyst position is also an internal security and compliance resource supporting Legal, HR, IT, Sales, SecOps, and GRC departments.WHAT YOU’LL DO

Be the single point contact to customer and internal sales/support for security compliance requirements
Evaluate and respond to customer due diligence requests, surveys, questionnaires, and annual reviews
Scope and align policy, controls, and processes with customer request objectives
Perform remediations and reply to customer follow-up for security issues
Review and respond to security sections of customer RFPs and contracts
Utilize GRC tools to update Fortra security knowledge base and maintain required documentation
Enhance Security Compliance and reputation by accepting ownership for accomplishing new and unique requests
Other duties as assigned

QUALIFICATIONS

Comparable work experience
Minimum 2 years direct experience or related background in technical support, risk management, IT security/audit, or relevant experience within the software industry
Knowledgeable of security frameworks SOC 2, ISO 27K, CMMC, or NIST CSF
Familiar with regulatory requirements such as HIPAA, PCI, and/or GDPR
Excellent analytic, communication, collaboration, and documentation skills
Ability to articulate technical topics with both technical and non-technical audiences
Proficient with Microsoft 365 business applications
Desirable Certifications: Sec+, CySA+, CEH, CCSK, CIA, CISA, CCSP, CISM, CISSP