At Iron Mountain we know that work, when done well, makes a positive impact for our customers, our employees, and our planet. That’s why we need smart, committed people to join us. Whether you’re looking to start your career or make a change, talk to us and see how you can elevate the power of your work at Iron Mountain.
We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our 225,000 customers around the world to preserve their invaluable artifacts, extract more from their inventory, and protect their data privacy in innovative and socially responsible ways.
Are you curious about being part of our growth story while evolving your skills in a culture that will welcome your unique contributions? If so, let's start the conversation.
The Senior Information Security Compliance Analyst will work to ensure Iron Mountain maintains its compliance to external customer and regulatory requirements.
The Senior Information Security Compliance Analyst will be responsible for supporting the core services of the Information Security group. They need basic knowledge and understanding around IT/ IS operational processes, and compliance and audit readiness.
What you'll do...
●Manage various compliance audits to ensure the deliverable is issued on a timely manner by coordinating with external auditors to understand audit requirements; providing sufficient artifacts to fulfill the auditor’s request; and communicating with internal stakeholders for audit status and areas of improvements
●Confer with business stakeholders to discuss new controls or any issues pertaining to their compliance and information security needs related to new business lines, becoming a subject matter expert.
●Provide prompt responses and support to customers for their audit questionnaires/ or RFP process related to IRM’s Information Security and IT practice.
●Support Manager, Information Security Compliance to manage the Information Security Awareness Program.
What you'll bring...
●Excellent interpersonal, communication and writing skills, with the proven ability to communicate and translate technical concepts, requirements, and issues to technical and non-technical business audiences.
●Ability to manage demands of internal and external customers and auditors through phone, email and process requests
●Strong organizational skills to manage fast paced and demanding requests in a defined service level
●Ability to team with other groups to influence the collection of information required to obtain compliance
●Familiarity with PCI-DSS/ ISO 27001/ HiTrust/ SOC 1 and SOC 2/ 3 frameworks
●Minimum Experience: 4 years
●CISA, CISSP are preferred, but not required
#LI-Remote
Category: Risk Management