The security compliance analyst position will provide and serve as a resource for security and compliance related tasks and projects. This role will develop, support and execute processes that enforce Assurant security policies and standards, regulatory requirements, contractual agreements/obligations and any other IT related security compliance or privacy requirements.
Primary Job Responsibilities
70% - Compliance Support
Conduct regular assessments to ensure compliance with cybersecurity regulations, standards, and industry best practices. Support the development of policies, procedures, and controls to address cybersecurity compliance requirements. Coordinate and participate in internal and external audits related to IT security compliance. Identify and assess risks to information assets and recommend mitigation strategies to address compliance gaps. Collaborate with IT and business stakeholders to implement security controls and remediate compliance issues. Monitor changes in regulations and standards to ensure ongoing compliance and recommend updates to policies and procedures as necessary. Prepare and maintain documentation, reports, and evidence of compliance activities for audit purposes. Provide guidance and training to staff on cybersecurity policies, procedures, and compliance requirements. Assist with incident response activities and investigations related to cybersecurity compliance issues.30% - Support and maintain systems and processes related to security and compliance functions.
Participate in audit activities, client audits, state DOI exams, RFP/due diligence reviews, internal audits Participate in all audit activities relating to SSAE-18 SOC 1 & 2 and SOX 404 IT audits ensuring work and deliverables in accordance with agreed upon timeframes and departmental procedures, standards, and protocols Partners cross-functionally, inter-departmentally and with the internal and external auditors to understand the process from an end-to-end perspective and appropriately and effectively communicates with these partners to understand the status for the corporation as a whole Ensures frequent communication of test and/or audit results and analysis on a timely basis to the appropriate stakeholders and senior management within the audit department Responsible for staying current on regulatory rules and changes within the industry, with specific focus on SSAE-18 SOC 1 & 2, SOX 404 and communicating industry/professional changes/ developments to the audit department Participates in meetings with business unit to discuss test and/or audit scoping, testing progress and results Educate Assurant management and staff regarding risks and controls pertaining to security-related concepts, compliance and audit requirements. Evaluate, test and plan implementation of new or improved controls to keep Assurant current with industry standards and compliance requirements Collaboration with other Assurant (i.e. IAS, Privacy, IT Legal) and industry groups on IT compliance-related issues and concerns Recognize trends in security and compliance and emerging risks; making recommendations regarding policy/procedure updates to enable proactive security approach for Assurant Manage, support and maintain security and compliance systems.Qualifications Required
Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field. (Master's degree preferred) Minimum of 5 years of experience in IT security, compliance, or risk management roles. Strong Knowledge of SSAE-18 SOC 1 & 2 and SOX 404 with an emphasis on testing requirements, and IT auditing Strong understanding of cybersecurity principles, standards, and frameworks (e.g., NIST Cybersecurity Framework, ISO 27001, GDPR, HIPAA). Experience with conducting risk assessments, gap analyses, and compliance audits. Familiarity with regulatory requirements such as SOX, PCI DSS, and industry-specific regulations. Excellent analytical and problem-solving skills, with the ability to assess complex IT environments and identify compliance issues. Strong communication skills, with the ability to effectively communicate technical information to both technical and non-technical stakeholders. Ability to work independently and collaboratively in a fast-paced environment. Relevant certifications such as CISSP, CISA, CISM, CRISC, or equivalent are preferred.At Assurant, we celebrate the differences that make us who we are. By assembling extraordinary teams from a variety of races, religions, sexual orientations, gender identities, ages, experiences, and abilities, we’re able to better reflect the global communities where we live and work. By working to remove barriers, we ensure equity for everyone. The pursuit of inclusion rests with each of us. Because it’s only by listening to and representing the unique voices of every individual that we can innovate for all.
For further information about Assurant, please visit our website: https://www.assurant.com/
Any posted pay range considers a wide range of compensation factors, including candidate background, experience, and work location, while also allowing for salary growth within the position.
Helping People Thrive in a Connected World
Connect with us. Bring us your best work and your brightest ideas. And we’ll bring you a place where you can thrive. Learn more at jobs.assurant.com.
For U.S. benefit information, visit myassurantbenefits.com. For benefit information outside the U.S., please speak with your recruiter.
What’s the culture like at Assurant?
Our unique culture is a big reason why talented people choose Assurant. Named a Best/Great Place to Work in 13 countries and awarded the Fortune America’s Most Innovative Companies recognition in 2023, we bring together top talent around the world. Although we have a wide variety of skills and experiences, we share common characteristics that are uniquely Assurant. A passion for service. An ability to innovate in practical ways. And a willingness to take chances. We call our culture The Assurant Way.
Company Overview
Assurant is a leading global business services company that supports, protects, and connects major consumer purchases. A Fortune 500 company with a presence in 21 countries, Assurant supports the advancement of the connected world by partnering with the world’s leading brands to develop innovative solutions and deliver an enhanced customer experience through mobile device solutions, extended service contracts, vehicle protection services, renters insurance, lender-placed insurance products, and other specialty products.
Equal Opportunity Statement
Assurant is an Equal Employment Opportunity employer and does not use or consider race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other characteristic protected by federal, state, or local law in employment decisions.
Technology is endlessly evolving. Today, we’re helping consumers connect and protect mobile devices, smart technology in homes and connected cars, and more.
Working in Assurant Careers in ArgentinaAssurant has two Global Capabilities Centers around the world. One of them is located in Argentina and is constantly growing and expanding.