Senior Security Compliance Analyst - REMOTE

Job Summary

The Senior IT Security Compliance Analyst provides support for technology compliance programs, including leading and executing functions and duties that may include:

• Consulting and collaborating with business and technology stakeholders at all levels on control design and remediation to mitigate technology risks;
• Participating on large‑scale projects;
• Maintaining IT control library/testing general computer and application controls;
• Coordinating and supporting technology components of onsite and virtual audits/assessments, NCUA examinations and client due diligence reviews;
• Performing segregation of duties reviews and user attestations;
• Documenting process flows and compliance‑related deliverables;
• Assisting with creation and maintenance of IT and information security policies and standards required to maintain company certifications (e.g., PCI DSS, NIST CSF);
• Coaching and cross‑training technology compliance staff.

• With minimal oversight, execute technology compliance and governance duties as assigned to meet company information security and technology compliance standards, industry requirements, and applicable laws and regulations (e.g., PCI DSS, NIST CSF, NIST AI Risk Mgt).
• Participate on strategic business and client commercialization projects (e.g., consulting, documenting, validating, and testing Blueprint controls).
• Review, test, and validate user account and security configurations for compliance with information security and technology policies/standards.
• Collect and maintain appropriate evidence and supporting documentation.
• Collaborate with and advise technical and business unit resources at all levels on designing, implementing, and remediating technology controls that achieve risk and control objectives and meet compliance requirements while striking a balance between costs vs. benefits.
• Execute segregation of duties (SOD) reviews and user attestations of internal/business partner systems and client online banking platforms.
• Document, maintain, and facilitate technology compliance deliverables (e.g., PCI Scope Validation, Targeted Risk Assessments, Compensating Control Worksheets, Shared Responsibility Matrices, process flows, department procedures).
• Identify and report on technology control status and metrics;
  Assist with Audit Committee and Board reporting.
• Coordinate and support technology components of internal/external audits and assessments (e.g., SOC1/2, PCI DSS, NIST CSF, NIST AI Risk Mgt, NACHA) and onsite/virtual client reviews; drive for timely submission of critical audit and compliance deliverables.
• Perform QA reviews of technology compliance work products (e.g., user attestation packages) and client assistance documentation prior to delivering to internal and external auditors, clients, and business partners.
• Cross‑train, coach, and mentor technology compliance team members in performing job functions.
• Support vendor risk governance program, RFPs, and client due diligence responses (e.g., SIG questionnaires, cybersecurity risk assessments).
• Perform other duties as assigned.

• Bachelor’s degree in computer science, information systems, cybersecurity, or related field, or equivalent combination of education and experience required.
• Cybersecurity risk management, governance, and control professional certification required (e.g., CISA, CRISC, CGEIT).
• Other relevant professional certifications preferred (e.g., PCI Internal Security Assessor (ISA), PCI Qualified Security Assessor (QSA), Certificate of Cloud Security Knowledge (CCSK), Project Management Professional (PMP), Certified Scrum Master (CSM)).
• Eight (8) years of relevant work experience in public accounting firm, IT controls consulting/testing, PCI/NIST CSF assessments, IT internal/external auditing, and technology risk management required.
• Experience in identification, validation, design, and testing operating effectiveness of general computer and application controls.
• Experience assessing cloud security and controls required.
• Experience in financial services required.
• Demonstrate behaviors based on Velera values:
  Dedication, Collaboration, Belonging, Curiousity, & Integrity.
• Th…