IT Compliance Analyst

Description

IT COMPLIANCE ANALYST

Qualys is looking for talented and motivated individual to join our growing Corporate IT team. We need a hands-on compliance analyst with a broad knowledge of IT compliance standards and the experience necessary for the technical implementation for resolving compliance gaps. This position is extremely dynamic as we support multiple compliance programs but will require a security minded professional to grasp the complexities and challenges while working for quick paced and fast-growing company. This candidate is responsible for improving our adherence to industry best compliance programs in being able to deploy suitable controls where needed in our environment and be able to track and communicate to stakeholders the current status towards improvement for various controls.

Responsibilities

• Create detailed analysis and technical specifications to create Qualys Controls for various technologies such as operating systems, applications, network devices, hypervisors, etc
• Create content for Qualys Controls, such as the control statement, rationale, and remediation recommendations while assigning control category, criticality ratings and document mappings based on the FedRamp/ISO/NIST/SOX standard etc
• Create out-of-box technical standards/policies in Qualys Policy Compliance for the above technologies and configure them on the basis of in-house expertise, industry best practice, or consensus guidelines from CIS, ISO, NIST, etc
• Verify policies, controls and control configurations for the above security standards/policies from auditors and customers point-of-view on various configuration scenarios to validate their suitability, applicability, and relevance
• Map Qualys controls to various requirements from industry regulations
• Research and analysis to provide compliance solutions for new and emerging technologies
• Work closely with the development, QA, management and infrastructure teams/peers to provide high-quality deliverables with quick turnarounds
• Audit systems for secure configuration - users, access control, central logging, etc
• Continuous policy compliance assessment and remediation using the Qualys Cloud Platform.
• Define, implement, and maintain Corporate IT Security Policies
• Assist Governance, Risk, and Compliance team in documenting and reporting control deficiencies upon discussion with stakeholders, internal auditors and collaborate with stakeholders to address root cause of issues with remedial actions
  
  

Skills

• 1-3 years of experience in Compliance Analyst position or IT Security Administration
• Bachelor’s degree in Information Technology, Information Security, or related field
• Strong knowledge of Cybersecurity and Information Security standards/frameworks such as NIST, ISO 27001 and CIS controls
• Strong knowledge and hands-on experience with different operating systems, applications, network devices, hypervisors, web proxies, DLP, and other infrastructure systems both onsite and cloud
• Strong knowledge and understanding of configuration and hardening guidelines, common industry/prescriptive standards such as CIS, NIST, ISO27001
• Aptitude to learn new technologies to quickly apply changes to product/services
• Ability to interact effectively at all levels of an organization, across diverse cultural and linguistic barriers, and as part of a geographically distributed team
• Uncompromising attitude when it comes to quality and helps raise the bar of Corporate IT department with team members to the organization
• Working experience in SaaS company is highly desirable
• CISSP/CEH/SANS Courses or any IT Certifications will be an added advantage