出海雷达

IT安全审计与合规分析师 - 远程机会

IT Security Audit and Compliance Analyst - Remote Opportunity

开发工程职能支持限定地区(需当地身份)
公司KinderCare Education, LLC
薪资未公开
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间14 天前
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。

未来从这里开始。在这里,第一步、新友谊和自信的学习者得以诞生。在KinderCare Learning Companies,我们是首家且唯一获得Gallup卓越工作场所奖的早期儿童教育提供商,为家庭提供多种早期教育和托育选择。无论是KinderCare学习中心、Champions还是Crème de la Crème,我们为孩子、家庭和我们共同的未来建立信心。我们希望你加入我们,一起在社区、工作中和全国学校中塑造它。
在KinderCare Learning Companies,你将运用你的技能和专业知识,支持我们在各个场所和中心每天发生的各项工作(以及乐趣)。从市场人员和策略师到财务分析师和数据工程师,我们所有人都热衷于打造一个让儿童、家庭和组织都能茁壮成长的世界。
KinderCare正在寻找一位细致而充满活力的IT安全与合规分析师,加入其信息安全团队,帮助保护公司的系统、数据和技术环境。在此职位上,你将支持跨云和本地基础设施的安全和合规项目,评估并解决风险,加强控制措施,并确保组织符合相关安全和监管要求。
作为IT安全与合规分析师,你将与IT、内部审计、项目管理、业务流程负责人和其他团队合作,识别控制差距,推动整改,并加强KinderCare的整体合规状况。向信息安全主管汇报,你将为公司安全和合规项目的持续发展和成熟做出贡献。
职责:

  • 确定IT系统和项目的安全、合规和控制要求;评估风险,识别差距,并制定适当的整改计划
  • 准备合规评估、审计证据、风险文档、政策、程序、控制文档及相关报告
  • 分析云和本地环境中的安全和合规风险及控制有效性;应用适用框架识别缺陷并加强控制
  • 执行ITGC、SOX、PCI DSS和其他合规控制测试;支持审计,跟踪发现和整改,并通过完成和重新测试验证纠正措施
  • 维护信息安全合规项目、风险登记表、政策
查看英文原文

Futures start here. Where first steps, new friendships, and confident learners are born. At KinderCare Learning Companies, the first and only early childhood education provider recognized with theGallup Exceptional Workplace Award, we offer a variety of early education and child care options for families. Whether it’s KinderCare Learning Centers, Champions, or Crème de la Crème, we build confidence for kids, families, and the future we share. And we want you to join us in shaping it—in neighborhoods, at work, and in schools nationwide.
At KinderCare Learning Companies, you’ll use your skills and expertise to support the work (and fun) that happens in our sites and centers every day. From marketers and strategists to financial analysts and data engineers, and so much more, we’re all passionate about crafting a world where children, families, and organizations can thrive.
KinderCare is seeking a meticulous and energetic IT Security & Compliance Analyst to join its Information Security organization and help protect the company’s systems, data, and technology environment. In this role, you will support security and compliance programs across cloud and on-premises infrastructures, assess and remediate risks, strengthen controls, and help ensure the organization meets applicable security and regulatory requirements.
As an IT Security & Compliance Analyst, you will work across IT, Internal Audit, Project Management, Business Process Owners, and other teams to identify control gaps, drive remediation, and strengthen KinderCare’s overall compliance posture. Reporting to the Head of Information Security, you will contribute to the continued development and maturity of the company’s security and compliance program.
Responsibilities:

  • Determine security, compliance, and control requirements for IT systems and programs; assess risks, identify gaps, and establish appropriate remediation plans
  • Prepare compliance assessments, audit evidence, risk documentation, policies, procedures, control documentation, and related reporting
  • Analyze security and compliance risks and control effectiveness across cloud and on-premises environments; apply applicable frameworks to identify deficiencies and strengthen controls
  • Perform ITGC, SOX, PCI DSS, and other compliance control testing; support audits, track findings and remediation, and validate corrective actions through completion and retesting
  • Maintain the information security compliance program, risk register, policies, procedures, and control environment while supporting new system assessments, compliance initiatives, and junior analyst development

Qualifications:

  • Bachelor’s degree in Information Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and experience, with 3–5 years of experience in Information Security, IT Audit, or Governance, Risk & Compliance
  • Knowledge of NIST, ISO 27001, SOC 2, COBIT 5, PCI DSS, SOX, ITGC, and other security and compliance frameworks
  • Experience developing, documenting, implementing, and testing IT security and compliance controls across cloud and on-premises environments
  • Proficiency in analyzing technical processes and control requirements, identifying security and compliance gaps, maintaining policies and procedures, and managing multiple compliance activities and deadlines

Our benefits meet you where you are. We’re here to help our employees navigate the integration of work and life:
- Know your whole family is supported with discounted child care benefits.
- Breathe easy with medical, dental, and vision benefits for your family (and pets, too!).
- Feel supported in your mental health and personal growth with employee assistance programs.
- Feel great and thrive with access to health and wellness programs, paid time off and discounts for work necessities, such as cell phones.
- … and much more.
We operate research-backed, accredited, and customizable programs in more than 2,000 sites and centers across 40 states and the District of Columbia. As we expand, we’re matching the needs of more and more families, dynamic work environments, and diverse communities from coast to coast. Because we believe every family deserves access to high-quality child care, no matter who they are or where they live. Every day, you’ll help bring this mission to life by building community and delivering exceptional experiences. And if you’re anything like us, you’ll come for the work, and stay for the people.
KinderCare Learning Companies is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, age, sex, religion, disability, sexual orientation, marital status, military or veteran status, gender identity or expression, or any other basis protected by local, state, or federal law.
Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

← 返回全部职位