At Foundever®, we prioritize security and integrity in all our operations, ensuring our systems, data, and customer information are protected against evolving threats. We seek a dedicated Senior Analyst in Security Assurance to focus on compliance with security standards and regulatory frameworks such as HIPAA, HITRUST, PCI DSS, SOC 1 and 2, NIST, and ISO 27001. Your expertise will be vital in coordinating external audits, gathering evidence, validating compliance, and engaging with stakeholders across the organization.
This is a remote role, candidate must be located and eligible to work in the Philippines.
Job Responsibilities
- Providing PCI DSS, ISO 27001, HIPAA, or SOC Compliance guidance across the organization
- Communication between the business, technology and compliance areas for general requests associated with standards and governing policies and procedures
- Lead with the resolution of identified information security and data risk issues associated to audit findings
- Ensuring internal policies and third-party vendor practices are fully compliant with PCI, ISO 27001, or HIPAA standards
- Analyzing PCI DSS or ISO 27001, SOC or HIPAA validation documents and client profiles to maintain validation requirements
- Assist in all aspects associated to compliance audits (i.e. Pre-on site deliverables, audit and assessment questionnaires, on-site audit support, written response to audit report and/or findings)
- Assist in documentation, retention, reporting and clear articulation of audit related information (i.e. scope, findings, recommendations, corrective action plans and status tracking) and documentation to Security, Compliance and Business Operations leadership as required
- Perform a variety of support and general administrative assignments in support of the audits or auditors, including filing, data entry, and tracking/correspondence while following established standards and work processes
- Manage multiple compliance audits and collaborate across multiple business segments to gather required information
- Act as resource and facilitate responses to general audit inquiries associated to clients and compliance audits
- Generate associated IT tickets as required in support of compliance evidence associated with the various compliance audits
- Assist in policy / procedure developments and on-going updates as required
- Successfully sets priorities, performs tasks in an orderly fashion, and meets time deadlines
- Stay informed of pending industry changes, trends, and best practices and assess the potential impact of these changes on organizational Security Policies, procedures, and Processes
Skills and Qualifications
- Bachelor’s Degree in Information Technology with 2 years of related work experience or 5 years working within IT Information Security
- 2 years+ of professional banking, finance, or healthcare industry experience
- 2 years+ in IT compliance, privacy and/or regulatory affairs or experience supporting audits in a highly regulated industry
- Payment Card Industry Professional (PCIP) Qualification or equivalent ISO/HIPAA
- Strong understanding of credit card processing guidelines as well as PCI DSS policies
- Knowledge of credit card processing technology
- Basic knowledge of audit Information Security Industry requirements: (PCI DSS, SOC 2 Type 2, SOC 1 Type 2, HIPAA, ISO 27001)
- Good understanding of information technology security requirements associated to industry standards: CIS, NIST, and HIPAA security guidelines, regulations and requirements
- Experience communicating with auditors associated with industry and client compliance as relates to Security
- Excellent computer skills in a Microsoft Windows environment, including ability to use Microsoft Office desktop tools (Outlook, Excel, Word)
- Ability to quickly adapt to changing priorities
- Excellent interpersonal, written, and oral communication skills
- Proven track record of meeting commitments with the highest standards of ethics and integrity
- Interact and communicate with all levels of management, including staff, managerial, and senior level personnel in IT and business roles
- Read and understand complex documents – legal and technical
- Handle and maintain confidential information
About Us
Foundever® is a global leader in the customer experience (CX) industry. With 150,000 associates across the globe, we’re the team behind the best experiences for +800 of the world’s leading and digital-first brands. Our innovative CX solutions, technology and expertise are designed to support operational needs for our clients and deliver a seamless experience to customers in the moments that matter.
#LI-MAM
