The Security Analyst is responsible for managing and maintaining the SOC 2 compliance program while supporting PCI DSS and SOX initiatives. They will collaborate with cross-functional teams to assess risks, facilitate audits, and document evidence to ensure adherence to security standards.
JOB TITLE: Security Analyst – GRC
LOCATION: Santiago DR
MODALITY: Remote in DR
SCHEDULE: Mon - Fri 09:00 AM - 06:00 PM
GENERAL DESCRIPTION OR PURPOSE OF JOB:
The Security Analyst – Compliance is primarily responsible for helping ensure our organization adheres to the SOC 2 (System and Organization Controls) requirements. Further, the incumbent will help maintain compliance with our PCI DSS program, SOX program, and internal policies and standards.
This role will collaborate with cross-functional teams to collect and assess evidence to satisfy security requirements. The individual must be a motivated team player with a positive attitude, solid interpersonal skills and someone who can quickly take ownership within their area. The individual must be hands-on, work under minimal supervision and can work in a fast-paced environment.
RESPONSIBILITIES / ESSENTIAL FUNCTIONS:
Item
Responsibility/Function
%Time
1
SOC 2 Program Management:
Lead or assist in the development and maintenance of the SOC 2 program, including policies, procedures, and controls.
Conduct internal assessments to identify and mitigate risks related to SOC 2 compliance.
Coordinate and collaborate with external assessors and stakeholders
Prepare reports and presentations on SOC 2 compliance status.
60%
2
SOX and IT Policy/Standard Program Support:
Provide support to help ensure compliance with Jostens Information Security Program, and PCI and SOX programs.
20
3
While the primary role is SOC 2 compliance, the candidate will be asked to back up other GRC activities.
Additional Duties and Responsibilities:
Risk Assessment: Assess risk, and coordinate, document, and validate evidence to meet Jostens cybersecurity and risk requirements. Ensure appropriate treatment of risk.
Audit/Assessments: Facilitate audits and assessments of IT programs and individual components to determine compliance with published standards (e.g., ISO27000, PCI, etc.).
Third Party Risk Management
Training: Develop, plan, coordinate, deliver, and/or evaluate training courses.
Metrics: Regularly report security metrics, proposing improvement as needed.
Privacy: Coordinate with legal and IT teams on privacy requests.
20
Required:
Education:
Bachelor’s degree in Business or Accounting, Information Security, Information Management Systems, Cybersecurity or other applicable area, or related work experience.
Experience:
Minimum one year in Information Security, IT Audit, or related role
Professional Skills:
Excellent analytical and problem-solving skills
Strong written and verbal communication skills
Ability to collaborate with cross-functional teams and external partners.
Attention to detail with experience prioritizing and managing multiple projects with competing priorities.
Strong influencing, problem solving and decision-making skills.
Preferred:
Five years in Information Security, IT Audit, or related role
Working knowledge of SOC2 requirements.
Hands-on experience with SOC 2 Type 2 and PCI DSS compliance programs.
Experience with security risk assessment methodologies and tools
Experience related to Audit, Security, Governance, Risk and Compliance, and/or process development/documentation.
Understanding or familiarity with frameworks (ISO27001, NIST, GDPR, CCPA, PCI, SOX, etc.)
Benefits:
Weekly Payment
Law medical insurance and AFP
Complementary Medical Insurance
Life Insurance
Internal Bank
Credit in pharmacy and optic center
Referral Program
Growth Opportunities
Remote Role
About Jostens:
Jostens leads the student commemoration market and has been serving local communities for over 125 years. We work with thousands of K-12 schools, colleges and universities each year, and have the honor of partnering with beloved sports teams and esteemed organizations across the country. Our iconic products — like yearbooks, letter jackets, class jewelry and championship rings — keep meaningful traditions alive and inspire millions of people to celebrate their unique stories, milestone moments and biggest accomplishments every year. We have 13 first-class facilities across the globe, from North America to the Caribbean. Watch a short video about us here.
Jostens is an Equal Opportunity Employer and complies with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
