IT Compliance Analyst

Overview

Are you looking to Optimize your life? Start your exciting path to a rewarding career today! We are Optimum, a leader in the fast-paced world of connectivity, and we're on the hunt for enthusiastic professionals to join our team! We understand that connectivity isn't just a luxury anymore – it's a necessity that empowers lives, fuels businesses, and drives innovation. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected.

We owe our success to our amazing product, commitment to our people and the connections we make in every community. If you are resourceful, collaborative, team-oriented and passionate about delivering consistent excellence, Optimum is the Company for you!

We are Optimum!

The IT Compliance Analyst will perform assessments of internal company compliance with our National Security Agreement (NSA) with the DOJ, our Consent Decree with the FCC related to outage emergency notifications, and various other compliance tasks including system and physical user access reviews. This individual will have extensive interactions relating to technical, procedural, and documentation controls with a wide range of technology and business functions that are required to be compliant.

Activities may include assessing, managing, driving and tracking all NSA and FCC Outage Decree compliance-related activities, the identification of compliance gaps, the development of remediation plans, monitoring compliance status, and support in the completion of required ongoing notifications, audits, and compliance reports. The individual is expected to possess superior skills in governance, risk, and compliance, to include critical thinking and creative analysis techniques in executing tests, distilling test results, and providing actionable recommendations for mitigation of gaps and improvements or enhancements to existing processes and procedures.

Should include skills surrounding multiple technologies, problem-solving, risk analysis, knowledge of information security policy, processes and technology, technical report writing, and strong client handling and consultative skills.

• Interact with various customer technical groups, business groups, subject matter experts, and key stakeholders to conduct interviews and identify and collect evidence required for the assessment.
• Liason with IT, Legal, Vendor Qualification, Engineering, HR, Security, and Governance.
• Liason with third party vendors to collect annual compliance addendums; and with Governance to improve Security Posture of NSA, PCI and SOX in scope vendors.
• Prepare for, present, and finalize meeting documentation for monthly and quarterly meetings with senior leadership.
• Conduct quarterly control design, effectiveness assessments, and review/audit vendor restrictions resulting in an Annual Report to the DOJ and Annual Audits for the NSA.
• Develop User Access Review Program for systems outside of SOX.
• Prepare and maintain annual compliance training ensure appropriate groups are included and tracked for completion.
• Conduct ongoing Outage Decree assessments, resulting in an Annual Report to the FCC.
• Identify areas requiring remediation (i.e., issues or gaps) or potential areas of improvement within the compliance process; as well as areas for process improvement and/or automation.
• Maintain KPIs and regularly communicate project status for stakeholder and management review via reports that effectively capture, explain, and communicate the results of assessments to varying technical and business audiences.

• 5-7+ years of experience in Compliance roles performing reviews, assessments, and audits.
• Strong background in Governance, Risk, Compliance, and Information Technology Infrastructure.
• Ability to work collaboratively with key customer stakeholders (e.g., process owners, technical resources) and other team members.
• Excellent communication skills, both written and verbal, and the ability to communicate complex security concepts to technical and non-technical audiences, including senior leadership.
• Demonstrable time and…