Security Analyst

ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.

Position Title:     Security Analyst

Location Information  

Remote | 12+ Month Contract

Position Responsibilities:

We are seeking a diligent and detail-oriented Security Analyst to join a dynamic security compliance project. In this role, you will contribute to remediation initiatives related to security compliance, with a primary focus on PCI but also lending expertise in GRC or SOX domains as needed. You will collaborate with both business and technical stakeholders, gather necessary data, and ensure all compliance requirements and documentation are met in a timely and accurate manner.

Essential Skills, Experience

• Support the execution of the certification and compliance roadmap by collaborating with cross-functional teams and external auditing agencies.
• Interpret, map, and communicate information systems compliance regulations and requirements throughout the organization, ensuring adherence to best practices.
• Conduct internal assessments and audits at both scheduled and ad hoc intervals, evaluating the design and operational effectiveness of policies and controls to mitigate organizational risk.
• Organize and support both internal and external compliance/certification audits, ensuring proper preparation and evidence collection.
• Monitor ongoing audit items from internal assessments and external audits, ensuring timely completion of remediation activities according to agreed-upon action and risk treatment plans.
• Identify and recommend opportunities for process improvements related to compliance policies, standards, and external requirements.
• Collect data from business and technical teams, conducting interviews to obtain necessary documentation and evidence.
• Manage a personal workload and deadlines independently in a fast-paced, project-oriented environment.
• Participate in meetings and facilitate productive discussions involving multiple teams, departments, and auditors.

• Professional experience with PCI compliance required; or, significant experience in GRC/SOX operational compliance.
• Strong understanding of security compliance frameworks and principles.
• Experience working with cross-functional technical and business teams.
• Excellent verbal, written, and interpersonal communication skills; ability to convey technical compliance concepts to non-technical stakeholders.
• Proficient in business analysis, documentation, and the collection of audit evidence.
• Experience using Lucid for process or compliance diagramming.
• Proficiency in Confluence for documentation and collaboration.
• Good command of the Google platform, including Gmail and Google Meet, for effective remote collaboration.
• Demonstrated proficiency in leading presentations, sharing screens, and creating or modifying diagrams collaboratively during team calls.
• Ability to work both independently and within a team to manage multiple stakeholder groups and facilitate progress toward compliance objectives.
• Self-driven, with strong organizational skills and accountability for deliverables.

ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.

Equal Employment Opportunity is The Law
This Organization Participates in E-Verify

Apply