IT Compliance Analyst

The IT Compliance Analyst will be responsible for working on IT-related audits and examinations with groups internal and external to SHI. The Analyst will serve as a subject matter expert in the areas of security controls and security risks throughout the organization. The candidate chosen will be a key member of our Compliance Team within Information Security. 

This position reports to the Compliance Manager, and is performed from SHI's Somerset NJ office location.

Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $14 billion global provider of IT solutions and services.

Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 6,000 of them. If you join our team, you’ll enjoy:

• Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.
• Continuous professional growth and leadership opportunities.
• Health, wellness, and financial benefits to offer peace of mind to you and your family.
• World-class facilities and the technology you need to thrive – in our offices or yours. 

• Examine, evaluate, and document internal controls based on various security and privacy standards (PCI, ISO27001, SOC2, NIST, GDPR, CCPA, etc.)
• Perform internal audits of security controls
• Lead IT-related audits and examinations conducted by external parties
• Lead internal audits
• Align policies, standards and procedures with compliance objectives
• Create and maintain security policies
• Lead departmental compliance meetings
• Produce quality deliverables in a timely fashion
• Prepare metrics and reports for management on the status of Compliance objectives
• Evaluate and respond to customer security contracts and surveys
• Produce documentation and diagrams as needed
• Remain up to date on current security and privacy related laws, regulations and standards
• Represent the Information Security Team by participating directly with projects and provide guidance, requirements and documentation for security related purposes when requested
• Evaluate, document and maintain standards, processes and procedures relative to security and privacy

• Bachelor’s degree in related field or relevant work experience required
  
• 2+ years of experience in a Compliance role
• Experience with security and privacy standards (PCI, ISO27001, SOC2, NIST, GDPR, CCPA, etc.)
• Working knowledge of IT related disciplines such as networking, security, operations, etc.

• Able to build and foster strong working relationships
• Able to present information on technical subjects in an understandable manner in both oral and written form
• Able to take ownership of a project through the life cycle
• Able to work independently
• Proficient computer skills required, experience using Microsoft applications (Word, Excel, PowerPoint, Visio and Outlook)
• Excellent communication and organizational skills

Preferred Certifications

• CISA
• CIPP

• The estimated annual pay range for this position is $60,000 - $80,000. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.
• Equal Employment Opportunity – M/F/Disability/Protected Veteran Status