Senior Analyst: Security Compliance & Assurance

At Jack Henry, we’re more than a technology company, we’re a force for good in financial services. We’re redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates.

If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we’d love to meet you.

The Senior Analyst, Security Compliance & Assurance, under minimal guidance, serves as a key member of the Security Compliance & Assurance team, supporting control owners across the organization by coordinating security compliance activities, validating evidence quality, tracking remediation, and providing transparency across audit, risk, cloud compliance, and vulnerability governance initiatives. This role focuses on assurance, oversight, and coordination, ensuring that security and compliance activities are performed in accordance with company policies, standards, and applicable frameworks.

The ideal candidate must be able to travel up to 5% for meetings or conferences.

This position may be worked remotely within the United States, with the exception of California.

This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM).

All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity.

• Serves as the central point of contact for internal, external, and regulatory audits (SOC, FFIEC, SOX, ISO, PCI, NIST).
• Manages the end-to-end audit lifecycle, including evidence collection via centralized tooling, control interpretation, and audit readiness activities.
• Supports control owners through first-line assurance by validating control design and operating effectiveness for accuracy and audit quality. Tracks compliance gaps, audit findings, and remediation actions to ensure timely closure.
• Enables cloud-native compliance and SOC readiness for Google Cloud and Azure environments. Partners with product teams to embed compliance requirements early in the lifecycle and clarifies shared responsibility models through technical documentation.
• Provides oversight for vulnerability management by monitoring SLA performance and managing risk exceptions. Supports broader risk assurance activities, including third-party reviews, client due diligence, and the documentation of risk treatment decisions.
• Maintains security governance artifacts by consolidating disparate business unit procedures into a unified framework aligned with corporate policies and standards.
• Develops leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes to drive continuous improvement within the Security Compliance & Assurance function.
• Participates in governance, risk, compliance, and security initiatives for Jack Henry.
• Performs other job duties as assigned.

• Bachelor’s degree in Information Security, Information Technology, Risk Management, or a related field.
• Minimum of 6 years of experience coordinating IT compliance and audit activities and supporting compliance requirements for audits.
• Strong working knowledge of cloud-native compliance expectations across multiple platforms.
• Advanced understanding of SOC, FFIEC, ISO, PCI, SOX, or NIST control requirements and mapping.
• Skilled in evidence quality review and process…