Information Security Program Analyst; Compliance

As Aegis Mobile continues to mature its Information Security Program, dedicated operational support is needed to coordinate governance activities, maintain program documentation, and ensure ongoing audit readiness. This position provides the organizational structure and administrative oversight necessary to keep the program organized, current, and aligned with business and compliance objectives.

The Information Security Program Analyst (Compliance) supports the administration and continuous improvement of Aegis Mobile's Information Security Program. This position coordinates governance activities, maintains controlled documentation, organizes audit evidence, and helps ensure compliance records remain accurate, current, and audit-ready.

Working closely with the Information Technology Manager and stakeholders across the organization, the role serves as the primary administrator of the organization's Information Security Program, supporting policy lifecycle management, audit coordination, compliance tracking, and governance reporting. Strategic governance, risk management, and compliance decisions remain the responsibility of management.

• Serve as the Primary administrator of the Information Security Program and Information Security Management System (ISMS)
• Maintain controlled policies, procedures, standards, and governance records
• Coordinate internal audits, external audits, customer assessments, and certification activities
• Administer the organization's governance, risk, and compliance platform and related program records
• Maintain compliance records, audit evidence, and supporting documentation
• Track policy reviews, employee acknowledgements, security awareness training, and recurring compliance activities
• Maintain the risk register and track corrective actions through completion
• Prepare governance reports, compliance metrics, dashboards, and management review materials
• Coordinate information security activities across Information Technology, Engineering, Human Resources, Operations, and other departments
• Identify opportunities to improve documentation, program administration, and operational effectiveness
• Maintain a high level of accuracy, organization, and attention to detail
• Keep governance documentation, records, and audit evidence current and audit-ready
• Meet deadlines for recurring compliance, audit, and certification activities
• Communicate professionally with employees, management, auditors, customers, and business partners
• Handle confidential and sensitive information with discretion
• Identify opportunities to improve program administration and documentation
• Work independently while collaborating effectively across departments
• Maintain a working knowledge of applicable security and compliance frameworks
• Demonstrate initiative, accountability, and follow-through
• Represent Aegis Mobile professionally during audits and customer assessments

• Working knowledge of information security principles and best practices
• Strong organizational, documentation, and records management skills
• Strong time management and organizational skills
• Excellent written, verbal, and interpersonal communication skills
• Ability to coordinate multiple priorities and meet deadlines
• Strong analytical and problem-solving skills
• Ability to work independently while collaborating across departments
• High degree of professionalism, integrity, and attention to detail

• Working knowledge of Microsoft 365, including SharePoint, Teams, Word, and Excel
• Familiarity with Microsoft Entra , Azure, or other enterprise cloud platforms
• Experience using governance, risk, and compliance (GRC) platforms such as Drata
• Familiarity with IT service management, ticketing, or work management platforms
• Understanding of common information security technologies and terminology

• Familiarity with project coordination or program administration
• Experience with policy administration and document control
• Experience coordinating internal or external audits
• Experience supporting ISO 27001, SOC 2, NIST CSF, PCI DSS, or similar security frameworks
• Experience preparing compliance metrics or management reports
• Professional certifications such as Security+, ISO 27001 Foundation, CISA, or similar

• Bachelor's degree in Information Systems, Cybersecurity, Business Administration, Risk Management, Information Assurance, or a related field, or an equivalent combination of education and experience
• Two (2) or more years of experience supporting information security, compliance, audit, governance, or related operational programs
• Demonstrated experience coordinating documentation, records, projects, or operational activities across multiple stakeholders
• Experience working with controlled documentation, audit evidence, or regulated records is preferred
• Ability to obtain and maintain applicable professional certifications as required