Cybersecurity Compliance Analyst

Information Technology Department

At Father Joe’s Villages, protecting client and organizational data is essential to sustaining trust, compliance, and operational excellence. The Information Technology team safeguards sensitive systems and information across on‑premises, cloud, and SaaS environments to ensure the confidentiality, integrity, and availability of data that supports our mission to end homelessness.

At Father Joe’s Villages, protecting client and organizational data is essential to sustaining trust, compliance, and operational excellence. The Information Technology team safeguards sensitive systems and information across on‑premises, cloud, and SaaS environments to ensure the confidentiality, integrity, and availability of data that supports our mission to end homelessness.

As a Cybersecurity Compliance Analyst, you will strengthen the organization’s cybersecurity posture by combining hands‑on security operations with structured compliance and risk management practices. You will monitor threats, support incident response, manage vulnerability remediation efforts, and maintain alignment with regulatory requirements including HIPAA, PCI‑DSS, and HUD/HMIS standards.

This role is ideal for a technically skilled and detail‑oriented professional who is motivated by protecting mission‑critical systems while ensuring ongoing compliance in a regulated environment.

• Monitor endpoint, cloud, and SaaS environments for security threats using centralized monitoring and detection tools.
• Deploy, configure, and maintain endpoint protection and cloud security solutions.
• Investigate security alerts, anomalous activity, and potential data misuse or exfiltration.
• Support vulnerability scanning, remediation tracking, and secure configuration practices aligned with CIS and NIST standards.
• Maintain documentation, policies, procedures, and evidence required for HIPAA, PCI‑DSS, and HUD/HMIS compliance.
• Support internal and external audits, vendor risk assessments, and control validation activities.
• Participate in incident response activities including detection, containment, recovery, and post‑incident analysis.
• Develop security metrics, reports, and risk summaries for leadership and audit purposes.
• Identify opportunities to improve security controls, automation, and operational efficiency.
• Complete required trainings and perform other related duties as assigned.

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent combination of education and relevant experience.
• Minimum of three (3) years of experience in cybersecurity operations, cloud security, compliance‑focused security, or related technical roles.
• Experience supporting regulated or compliance‑driven environments (e.g., HIPAA, PCI‑DSS, HUD/HMIS, or similar frameworks).
• Experience working with security tools such as endpoint detection and response (EDR/XDR), SIEM platforms, vulnerability management tools, or cloud security controls.

• Working knowledge of cybersecurity principles including threat detection, incident response lifecycle practices, and vulnerability management.
• Familiarity with regulatory frameworks such as HIPAA Security Rule, PCI‑DSS, NIST Cybersecurity Framework, or similar standards.
• Experience with security monitoring tools, log analysis, and documentation of compliance evidence or audit artifacts.
• Familiarity with cloud security concepts including identity and access management and secure configuration practices.
• Abilities & Ways of Working
• Ability to analyze logs, alerts, and technical findings and translate them into clear, prioritized recommendations.
• Ability to manage multiple priorities in a dynamic environment, including time‑sensitive incident response or audit preparation activities.
• Strong organizational skills and attention to detail when maintaining policies, risk registers, and compliance documentation.
• Professional Attributes & Behaviors
• Professional judgment and discretion when handling sensitive…