Compliance Analyst - Hybrid
PA- Shivani
Compliance Analyst - Hybrid
Full Time • PA- Shivani
Job Description:
Position Summary: Under the direction of the IT Compliance and Risk Manager, this position serves as a Security Awareness and Compliance Analyst within the Enterprise Information Security Office (EISO), supporting the Commonwealth's Governance, Risk, and Compliance (GRC) Department. The GRC function provides governance, risk evaluation, and compliance oversight to support informed decision-making and the responsible adoption of technology across the Commonwealth.
The Security Awareness and Compliance Analyst administer the organization's Security Awareness and Phishing Program and supports governance, risk, and compliance initiatives. The employee develops and coordinates security awareness activities, manages phishing simulation campaigns, analyzes program effectiveness, and supports regulatory reporting while contributing to the overall maturity of the GRC program.
Description of Major Duties:
- Administers and maintains the enterprise Security Awareness Program.
- Plans, coordinates, and executes phishing simulation campaigns.
- Tracks, analyzes, and reports security awareness and phishing metrics using established reporting tools.
- Develops and distributes security awareness communications and educational materials.
- Coordinates required cybersecurity awareness training activities across the organization.
- Maintains awareness program documentation and records to support compliance and audit requirements.
- Assists with preparation of reports supporting regulatory requirements, audits, and management reviews.
- Recommends improvements to awareness activities based on metrics, emerging threats, and industry best practices.
- Assists with governance, risk, and compliance initiatives as assigned.
- Participates in continuous improvement activities supporting the organization's cybersecurity program.
- Performs related work as assigned.
Knowledge and Abilities
Knowledge of:
- Information security awareness principles
- Cybersecurity fundamentals
- Security awareness and phishing simulation platforms
- Reporting and data analysis techniques
- Compliance and audit support activities
Ability to:
- Coordinate multiple projects and training activities
- Analyze program metrics and identify trends
- Communicate effectively with diverse audiences
- Develop user-friendly educational materials
- Establish productive working relationships with agency staff
Required Skills
Plans, coordinates, and executes phishing simulation campaigns.
Administers and maintains the enterprise Security Awareness Program.
Develops and distributes security awareness communications and educational materials.
Maintains awareness program documentation and records to support compliance and audit requirements.
Assists with preparation of reports supporting regulatory requirements, audits, and management reviews.
Recommends improvements to awareness activities based on metrics, emerging threats, and industry best practices.
Questions
Do you understand, and will abide by, the provision in your subcontract with OST that it is PROHIBITED for government equipment to be taken or used outside of the United States by your contractors? The consequences of this occurring can and will result in repercussions to you, the prime vendor, regardless if the candidate works for a sub-vendor of yours. It will also result in immediate termination of the contractor, and make them ineligible for rehire in the program.
Compensation: $25.00 per hour
About SR International INC.
SR International has been a leading name among the IT consulting companies with offices in US and India. For past 16 years, our industry experience and domain knowledge have enabled us to provide innovative solutions to our customers.
Who We Are
Who We Are
We Are Leading IT Based Solution Providers
Today, the world of business information represents the realization of our collective efforts toward improving the future. Held only by the limits of our imagination, the business world is accelerating at an ever-increasing pace. Imagine a better way of doing business, of implementing the perfect software, of refining practice or business integration. All it takes are benchmark standards in service, support, and technical know-how, which have been our bread and butter.
Our Vision.
Our Vision.
Established in 2002, SR International Inc is one of the fastest growing and reputed provider of Information Technology Services and Solutions in the USA. Since our inception, we have been a trusted IT partner for our clients. We take pride in our highly skilled IT Resources and unique engagement model. We have been consistently delivering on our promises as a high-performance team. Our expertise in Cloud Computing, Mobility, Web Technologies, ERP and CRM are second to none. Our industry-leading flagship product iMathSmart is re-defining math learning experience for school students.
Career At SR International
At SR International, we treat our consultants like family. Our business and our reputation have been built and maintained by quality resources working onboard, so it’s important for us to maintain the quality resource pool.
(if you already have a resume on Indeed)