Apply on Employer Site

MyOutDesk · 7 hours ago

IT Compliance Analyst

United States

Full-time

Remote

New Grad, Entry Level

MyOutDesk is a global staffing and talent solutions company with nearly 20 years of experience helping businesses scale through high-performing remote teams. They are seeking an organized, detail-oriented IT Compliance Analyst to support their SOC 2 and ISO 27001 compliance programs, focusing on operational execution and compliance task management.

ConsultingFinancial ServicesHealth CareMortgageOutsourcingProfessional ServicesReal EstateResidential

Growth Opportunities

Responsibilities

Monitor and coordinate with key teams and their managers to ensure e-signatures, required training, and required acknowledgements are completed in accordance with our SLA

Track security training, completion, and send reminders to MyOutDesk staff and contractors

Open, monitor, and collect required evidence for personnel onboarding & offboarding

Manage evidence hygiene, accuracy, and retention in accordance with control requirements

Coordinate with platform owners to ensure that onboarding, and offboarding actions are done in a timely manner

Coordinate with platform owners quarterly to assess user activity and ensure that user activity is in-line with our policies

Maintain least-privilege evidence and quarterly access review records; follow up on exceptions until resolved

Log role/permission changes with approvals, ticket links, screenshots, and effective dates

Keep the vendor/third-party register current in our compliance platform (owner, service, data categories, risk rating, review date)

Coordinate with key IT leadership to assign, determine risk, and determine new risk levels

Track subprocessor update(s) for announcements to relevant parties as required by MyOutDesk’s control environment

Confirm functionality of audit trails and related AWS alarms are functional through our compliance platform(s)

Administer, create, and manage the lifecycle of tickets in our ticketing system, as well as product-related tickets

Assess if such tickets will have an impact on our compliance environment during the execution of our software development workflow

Assist in creating customer-facing patch notes for product update(s) to our internally developed platforms

Maintain clean naming conventions for files, version control, organized folders

Review deadlines upcoming next week (key rotations, SLAs, KPIs) that need attention and raise tickets in relevant platforms communicate verbally as needed

Qualification

SOC 2ISO 27001Compliance documentationTicket managementProcess coordinationEvidence collectionRegulated environmentsOperational hygieneAttention to detailClear communication