Information Security Compliance Auditor

The Information Security Compliance Auditor plans and carries out measures to protect the operational security of all information processing systems both on premise and located in the cloud. The Information Security Analyst (ISCA) is responsible for testing and monitoring of Information systems and network security best practices, standards and regulatory compliance across the enterprise for both on premise and cloud-based resources. The ISCA plans and executes security and compliance audits, identifies areas of remediation, and tracks progress of remediation tasks. Working individually, as well as part of various project teams, the ISCA facilitates the design of computer operations controls, security operations controls, and regulatory controls based on applicable standards and accepted best practices. The ISCA plans and executes security and compliance audits, identifies areas of remediation, and tracks progress of remediation tasks. The ISCA develops reports that reflect overall compliance status as well as identifying negative trends. The ISCA travels to affiliate sites as necessary to conduct compliance evaluations and working with management design compliance programs. This position can be fully remote or work out of the Merrimack, NH office.

Requirements

Bachelor's Degree or the equivalent combination of education and work experience, along with a minimum of 2 or more years work experience. Required competencies:

Basic understanding of SOX, HIPAA, MA201, Privacy, NIST standards

Basic understanding of Cloud operations

Understanding of Microsoft, Linux, Cloud administration functions

Technical aptitude with ability to absorb and apply newly learned technical skills

Microsoft Office application suite

Basic understanding IT, HR, Finance, Legal and other various business processes with ability to gather requirements, analyze processes, and to suggest process improvements as needed for compliance

Working knowledge of audit procedures and protocols with ability to develop test evaluations for compliance

Adaptable with ability to switch tasks based on shifting priorities

Analytical with ability to draw conclusions from data, systematic and rational

Conceptual with ability to conceive mentally, formulate ideas, use imagination to achieve results

Detail oriented with item by item focus, meticulous attention to detail with ability to proofread for accuracy

Interpersonal skills with ability to work well with all levels of the organization