Senior Analyst: Security Compliance & Assurance

At Jack Henry, we're more than a technology company, we're a force for good in financial services. We're redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates.

If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we'd love to meet you.

The Senior Analyst, Security Compliance & Assurance, under minimal guidance, serves as a key member of the Security Compliance & Assurance team, supporting control owners across the organization by coordinating security compliance activities, validating evidence quality, tracking remediation, and providing transparency across audit, risk, cloud compliance, and vulnerability governance initiatives. This role focuses on assurance, oversight, and coordination, ensuring that security and compliance activities are performed in accordance with company policies, standards, and applicable frameworks.

The ideal candidate must be able to travel up to 5% for meetings or conferences.

This is a remote position, and candidates must live within approximately a 70-mile radius of our office locations in Allen, TX;
Louisville, KY;
Cedar Falls, IA;
Birmingham, AL;
Charlotte, NC;
Lenexa, KS;
Springfield, MO; or Monett, MO.

This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM).

All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity.

What you'll be responsible for:

* Serves as the central point of contact for internal, external, and regulatory audits (SOC, FFIEC, SOX, ISO, PCI, NIST).

* Manages the end-to-end audit lifecycle, including evidence collection via centralized tooling, control interpretation, and audit readiness activities.

* Supports control owners through first-line assurance by validating control design and operating effectiveness for accuracy and audit quality. Tracks compliance gaps, audit findings, and remediation actions to ensure timely closure.

* Enables cloud-native compliance and SOC readiness for Google Cloud and Azure environments. Partners with product teams to embed compliance requirements early in the lifecycle and clarifies shared responsibility models through technical documentation.

* Provides oversight for vulnerability management by monitoring SLA performance and managing risk exceptions. Supports broader risk assurance activities, including third-party reviews, client due diligence, and the documentation of risk treatment decisions.

* Maintains security governance artifacts by consolidating disparate business unit procedures into a unified framework aligned with corporate policies and standards.

* Develops leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes to drive continuous improvement within the Security Compliance & Assurance function.

* Participates in governance, risk, compliance, and security initiatives for Jack Henry.

* Performs other job duties as assigned.

What you'll need to have:

* Bachelor's degree in Information Security, Information Technology, Risk Management, or a related field.

* Experience coordinating IT compliance and audit activities and supporting compliance requirements for SOC audits.

* Strong working knowledge of cloud-native compliance expectations across multiple platforms.

* Advanced understanding of SOC, FFIEC, ISO, PCI, SOX, NIST control requirements and mapping.

* Skilled in evidence quality review and process optimization.

* Strong ability to coordinate audit readiness independently.

* Capability to evaluate remediation plans and track SLA adherence.

LICENSING/

CERTIFICATIONS:

* CISA, CISM, CCSK, CISSP, GIAC, Cloud-related certifications (Google Cloud, Microsoft Azure) preferred.

What would be nice for you to have:

* Advanced analytical and data reporting abilities.

* Ability to research and resolve questions in a timely manner.

* Strong communication, decision-making, and project management skills.

* Ability to maintain confidentiality when working with confidential materials and employee information.

* Ability to interpret control requirements and guide business partners.

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're looking for passionate, driven individuals who align with our mission and can bring unique perspectives to our team.

Why Jack Henry?

At Jack Henry, we live by the motto: "Do the right thing, do whatever it takes, and have fun." It's more than a tagline,…