Security Compliance Analyst

Overland Park, Kansas, United States of America

At Lockton, we’re passionate about helping our people achieve their ultimate potential. Our people are curious, action-oriented and always striving to make ourselves and those around us better. We’re active listeners working to ensure understanding and problem solvers developing innovative solutions. If you can see yourself delivering excellent service to clients, giving back to our communities and being a part of our caring culture,
you belong here.

Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities. This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program. The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.

• Support audit and assessment cycles by maintaining request lists, coordinating evidence collection, tracking deadlines, scheduling walkthroughs, documenting questions, and following up on open items.
• Work with control owners to collect complete, accurate, and timely evidence; perform an initial quality review before materials are submitted for further review or provided to auditors.
• Help educate control owners on control intent, evidence expectations, recurring deadlines, and documentation standards.
• Support interactions with internal and external auditors, including meeting coordination, request clarification, walkthrough preparation, and tracking follow-up questions and commitments.
• Maintain compliance documentation such as control narratives, evidence inventories, procedures, testing records, issue logs, and remediation trackers.
• Identify missing evidence, documentation inconsistencies, and potential control gaps; escalates concerns and assist with remediation follow-up.
• Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
• Prepare and maintain draft responses to client security questionnaires and due-diligence requests using approved information about Lockton’s security program and controls.
• Assist with client and prospective-client security discussions by preparing materials, documenting questions, and coordinating responses with subject-matter experts.
• Maintain reusable answer content and supporting documentation for client assurance activities.
• Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders on compliance-related requests and projects.
• Stay current on cybersecurity compliance concepts, audit practices, and relevant industry developments.

• Familiarity with reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.
• Exposure to SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.
• Experience with governance, risk, and compliance platforms, evidence repositories, questionnaire-response tools, or workflow systems.
• Experience in a regulated, professional-services, financial-services, insurance, or similarly complex environment.

Success will be demonstrated through reliable audit support, accurate and timely evidence, effective follow-up with control owners, clear documentation, consistent client-questionnaire responses, and continued growth in security compliance knowledge and judgment.

#LI-JM

Lockton Companies is proud to provide everyone anequal opportunity to…