Security & Compliance Analyst

Overview

We are looking for a Security and Compliance Analyst who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices.

Reports to the IT Manager.

• Support the creation, documentation, and implementation of security and compliance policies and procedures. Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security-log reviews. (Pen Testing, etc.)
• Conduct assessments and audits to measure the efficiency of our compliance and security systems. Prepare reports and escalate findings to senior staff for review.
• Evaluate and assist in documenting disaster recovery programs and support testing efforts in cases of security incidents and breaches.
• Provide analysis and recommendations to the IT Manager regarding security risks and mitigation strategies. Keep up to date with external security and compliance regulations and data privacy and security best practices and assist with updates to internal policies and procedures as directed.
• Assist in preparing materials for internal training sessions about the latest information security and compliance policy updates.
• Collaborate with vendors to support data-handling reviews and maintain documentation related to vendor compliance.
• Reporting security breaches to management for prompt resolution and assist in incident documentation, tracking and follow-up actions.

None. This is a non-supervisory role.

TRAVEL:

Occasional extended or overnight travel to manufacturing plants or customers is required. Local travel in the Cleveland area may be required.

CONFIDENTIALITY:

Position has access to corporate financial statements and employee PII (Personally identifiable Information).

EDUCATION REQUIRED:

Bachelor’s degree in an information technology or related field.

EXPERIENCE

REQUIRED:

1-3 years of experience in a security, compliance, IT auditing, or cybersecurity role. Strong understanding of information security and privacy standards and best practices related to securing data and confidentiality. Working knowledge of industry-relevant data security and compliance regulations. Excellent analytical, data visualization, and communication skills.

EXPERIENCE PREFERRED:

A CISSP certification or pursuit of security-related certifications (Security+, CISA, CISSP Associate) is a plus. Experience in IT auditing or risk assessment.