Job Summary:

The IT Compliance Analyst will be responsible for working on IT-related audits and examinations with groups internal and external to SHI. The Analyst will serve as a subject matter expert in the areas of security controls and security risks throughout the organization. The candidate chosen will be a key member of our Compliance Team within Information Security. 

This position reports to the Compliance Manager, and is performed from SHI's Somerset NJ office location.

About Us:

Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $14 billion global provider of IT solutions and services.

Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 6,000 of them. If you join our team, you’ll enjoy:

Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.

Continuous professional growth and leadership opportunities.

Health, wellness, and financial benefits to offer peace of mind to you and your family.

World-class facilities and the technology you need to thrive – in our offices or yours. 

Responsibilities:

Examine, evaluate, and document internal controls based on various security and privacy standards (PCI, ISO27001, SOC2, NIST, GDPR, CCPA, etc.)

Perform internal audits of security controls

Lead IT-related audits and examinations conducted by external parties

Lead internal audits

Align policies, standards and procedures with compliance objectives

Create and maintain security policies

Lead departmental compliance meetings

Produce quality deliverables in a timely fashion

Prepare metrics and reports for management on the status of Compliance objectives

Evaluate and respond to customer security contracts and surveys

Produce documentation and diagrams as needed

Remain up to date on current security and privacy related laws, regulations and standards

Represent the Information Security Team by participating directly with projects and provide guidance, requirements and documentation for security related purposes when requested

Evaluate, document and maintain standards, processes and procedures relative to security and privacy

Qualifications:

Bachelor’s degree in related field or relevant work experience required

3+ years of experience in a Compliance role

Experience with security and privacy standards (PCI, ISO27001, SOC2, NIST, GDPR, CCPA, etc.)

Working knowledge of IT related disciplines such as networking, security, operations, etc.

Required Skills:

Able to build and foster strong working relationships

Able to present information on technical subjects in an understandable manner in both oral and written form

Able to take ownership of a project through the life cycle

Able to work independently

Proficient computer skills required, experience using Microsoft applications (Word, Excel, PowerPoint, Visio and Outlook)

Excellent communication and organizational skills

Certifications Required:

Preferred Certifications

CISA

CIPP

Additional Information:

The estimated annual pay range for this position is $60,000 - $80,000. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.

Equal Employment Opportunity – M/F/Disability/Protected Veteran Status