Information Security Compliance Analyst

Information Security Compliance Analyst II - West Des Moines, Iowa

We are looking to add an Information Security Compliance Analyst II to join our Information Security team in West Des Moines, Iowa.

• Support the information security program, including initiatives related to strategy, policies, standards, risk management, awareness, and training.
• Support the enhancement of the Enterprise’s overall governance program.
• Conduct comprehensive risk assessments and provide detailed reports on findings and required mitigations.
• Lead the development and maintenance of policies, ensuring they address regulatory requirements.
• Oversee implementation of risk mitigation controls, risk management, and conduct follow-up audits.
• Manage vendor risk assessments, working with third parties to address any gaps.
• Review contractual agreements against compliance standards in alignment with HMA contractual requirements.

• Develop and present compliance metrics and reports to senior management and auditors.
• Mentor junior analysts and oversee documentation quality.
• Lead special compliance projects, ensuring alignment with strategic goals.
• Assist with the annual SOC2 audit and other audits or assessments as appropriate.

• Strong understanding and application of privacy policies, compliance standards and regulations such as NIST, HIPAA, NYDFS or GLBA.
• Solid knowledge of GRC tools such as Apptega, Archer, etc.
• Broad technical knowledge of network, cloud, and application security.
• Ability to conduct internal and external risk assessments and identify various types of risks, including operational, cybersecurity, regulatory, and reputational risks.
• Proficient with mapping and analyzing workflows to identify points of inefficiency, risk, or non-compliance.
• Strong understanding of SDLC and experience in compliance integration.
• Experience using automation tools within the work environment.
• Ability to participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.
• Ability to be available for work on a daily basis and extended hours as necessary.
• Ability to pursue relevant designations and/or continuing education, as appropriate.
• Ability to apply common sense understanding to carry out instructions furnished in written, oral or diagram form.
• Ability to deal with problems involving several concrete variables in standardized situations.
• Physical capability to lift, carry, push, or pull up to 10 pounds occasionally.
• Must be knowledgeable of and comply with HMA's Client Privacy Policy, HIPAA regulations and E&O procedures and policies.

• Education:
  
  Associate’s or Bachelor’s degree in cybersecurity, technology, information systems, or related area or an equivalent combination of education, training, and experience.
• Experience:
  
  3-5 years of relevant experience in Information Security, compliance, governance, or other security-related fields.
• Relevant certifications preferred.

• Trust – Build trust through honest and caring actions and consistently do the right thing.
• Communication – Seek understanding to convey messages and information to others in a caring and constructive manner.
• Client Focus – Establish meaningful relationships with clients (internal and external) by supporting their unique potential and delivering an impactful experience.
• Teamwork – Contribute to the success of the organization by effectively influencing others and uplifting team members.
• Business & Technology Knowledge – Invest in the development of technical knowledge, understand business needs to make informed decisions and deliver technology solutions, including effective related processes and procedures.
• Problem Solving – Identify problems, leverage resources to determine root cause, and propose and implement solutions or make improvements.

• Health, dental and vision.
• Paid parental leave and supportive new parent benefits.
• Company‑paid continuing education & tuition reimbursement.
• 401k profit sharing with lump‑sum contributions for all full‑time employees.
• Generous time‑off practices in addition to paid holidays.
• Paid volunteer time off and matching gifts to charities through Holmes Murphy Foundation.
• Inclusion & belonging programs, including Uniquely United diversity initiatives.
• Consistent merit increase and promotion opportunities reviewed annually.
• Discretionary bonus opportunity.

Holmes Murphy & Associates is an Equal Opportunity Employer.