What are the responsibilities and job description for the Compliance Analyst position at DOT Security?
DOT Security’s mission is to improve the security posture of client organizations by providing detection, response, risk management, and compliance services as identified and required. DOT Security will implement processes, technology, and subject matter expert personnel to monitor and respond to client needs in the cybersecurity and compliance space. Working with client organizations, DOT Security will continuously measure and improve internal processes and technology, which will translate to improved services provided to the client.
DOT Security is seeking to fill the role of Compliance Analyst. The Compliance Analyst will support the Virtual Compliance Manager (vCM) in ensuring clients adhere to regulatory compliance requirements. This role involves assisting in client communication, providing policies, collecting evidence, updating the GRC software, and keeping client dashboards up to date.
Workload
- 50% Client strategy & risk management
- 30% Gap Analysis
- 20% Professional development & administrative tasks
Responsibilities
- Assist in client communication and support client compliance-related inquiries.
- Provide clients with relevant compliance policies and procedure templates.
- Collect and organize evidence required for compliance audits and reviews.
- Update and maintain the GRC software with current compliance data.
- Keep client dashboards up to date with the latest compliance status and metrics.
- Support the development and implementation of written compliance policies and procedures.
- Track client compliance documents and support the filing of compliance reports as needed.
- Perform periodic gap analysis and ongoing compliance monitoring for client organizations.
- Remain up-to-date on compliance laws, rules, and regulations.
- Act with a sense of urgency, identify alternatives, and set realistic timeframes for resolution.
- Complete work based on priority, follow through as promised, and set expectations.
- Contribute to and perform both new and pre-existing plans, instructions, and procedures.
- Demonstrate active listening and critical thinking skills and comprehend received information.
- Interpret and understand complex and evolving concepts in a dynamic, fast-paced environment.
- Understand and present technical concepts to non-technical audiences.
- Provide exceptional customer service and remain calm under pressure.
- Resolve problems in early stages and ticket labor, notes, and details in our ticketing system.
Things We Are Looking For
- Client relationship participation (listening, setting expectations, delivering results).
- Feedback interpretation for internal process, product, and service improvement.
- Policy, process, and procedure writing and review concepts.
- Project Management principles and techniques.
- Ability to work independently and as part of a team.
- Adaptability to situations in which data is incomplete or where no precedent exists.
- Communicate and collaborate in a clear, professional, and concise manner using technology, tools, and workspaces.
- Critical thinking, customer service skills, and passion for cybersecurity.
- Documenting and communicating complex technical concepts, incidents, problems, and events.
- Preparation and delivery of reports, plans, and briefings using presentation technology.
- The ability to work ethically and with integrity.
Other Desire Attributes
- Public Trust background check (Limited Requirement)
- Relevant work experience in managed services industry
- Cyber community participation (conferences/groups/tool authoring/CTFs)
- Relevant college degrees
- Experience with CMMC
Benefits
- Expected salary range of $75,000-$85,000
- 20 days of PTO
- 12 paid holidays
- Flexible Sick Day Policy
- Paid Parental Leave
- Comprehensive Health, Disability Life, Dental and Vision Plans
- 401(K) discretionary match & retirement plans
- Continued education reimbursement
- On-going training & development opportunities
#LI-Onsite
Salary : $75,000 - $85,000
