What are the responsibilities and job description for the Senior Security and Compliance Analyst position at CloseKnit?

Job Description

Salary : Overview :

Closeknit is seeking a highly skilled and proactive Senior Security and Compliance Analyst to enhance our organization's security and compliance posture. This role is critical in achieving compliance objectives, including SOC 2, ISO 27001, and HITRUST certifications. The role will also focus on fostering a culture of security and ensuring the successful execution of key security initiatives.

The ideal candidate will take ownership of personnel security, endpoint compliance, vulnerability management, and audit readiness efforts while driving collaboration across teams and ensuring the timely execution of deliverables.

Key Responsibilities

Oversight

Serve as a key point of contact for security and compliance initiatives, ensuring alignment with organizational goals.

Facilitate cross-department collaboration to meet security and compliance objectives.

Policies and Procedures

Develop, review, and maintain security and compliance policies and procedures.

Ensure policies reflect current industry standards and regulatory requirements (e.g., SOC 2, ISO 27001, HITRUST).

BC / DR and Incident Response

Create and manage business continuity and disaster recovery (BC / DR) plans.

Coordinate and conduct incident response tabletop exercises and ensure readiness to address security incidents.

Personnel Security

Administer and manage security training programs for employees and contractors.

Finalize and secure signoff on security policies, ensuring team acknowledgment and adherence.

Access Management

Develop and enforce processes to control and monitor access to sensitive systems and data.

Regularly review access rights and ensure compliance with least privilege principles.

Vendor Management

Conduct risk assessments for vendors and third-party providers to ensure compliance with security standards.

Work with legal and procurement teams to ensure vendor contracts meet security and compliance requirements.

Partner Management

Collaborate with internal and external partners to align on security expectations and goals.

Facilitate effective communication and coordination with stakeholders.

Asset Management

Maintain an up-to-date inventory of IT assets and ensure their compliance with security policies.

Implement processes for secure acquisition, usage, and decommissioning of assets.

Internal Security

Manage vulnerability remediation by collaborating with engineering teams and tracking progress.

Perform periodic audits and ensure compliance with internal security controls.

Vulnerability Management

Identify, prioritize, and mitigate security vulnerabilities across systems and applications.

Establish a workflow for the timely resolution of vulnerabilities.

Audits, Assessments, and Certifications

Drive readiness for SOC 2, ISO 27001, and HITRUST certifications.

Act as the primary liaison between internal teams and external auditors.

Ensure documentation, evidence, and controls are prepared for audits.

Key Success Metrics

Initiative : Independently initiates and completes tasks ahead of expectations.

Follow-Through : Provides consistent and thorough updates, ensuring no delays due to lack of action or communication.

Measurement :

Adheres to reporting timelines.

Completes all deliverables with a high standard of quality.

Qualifications

Experience :

5 years in a security and compliance role, with experience in SOC 2, ISO 27001, HITRUST, and other regulatory frameworks.

Proven track record of managing audits, policy development, and training programs.

Technical Skills :

Familiarity with compliance tools and systems (e.g., Drata, Vanta).

Strong knowledge of ISO 27001, HITRUST, SOC 2, and endpoint security.

Soft Skills :

Exceptional communication and organizational skills.

Ability to manage multiple priorities and proactively address challenges.

Team player with strong leadership and initiative-taking abilities.

Why Join Closeknit?

Mission-Driven Work : Play a pivotal role in shaping the security culture of a health-focused organization.

Professional Growth : Gain hands-on experience with SOC 2, ISO 27001, and HITRUST compliance efforts.

Collaborative Environment : Work alongside a passionate team to drive impactful results.

remote work

Apply for this job

Receive alerts for other Senior Security and Compliance Analyst job openings

Senior Security and Compliance Analyst

What are the responsibilities and job description for the Senior Security and Compliance Analyst position at CloseKnit?

What is the career path for a Senior Security and Compliance Analyst?

Not the job you're looking for? Here are some other Senior Security and Compliance Analyst jobs in the Baltimore, MD area that may be a better fit.

We don't have any other Senior Security and Compliance Analyst jobs in the Baltimore, MD area right now.

AI Assistant is available now!