Security Compliance Analyst

ACM Global Laboratories is seeking a Security Compliance Analyst who will be responsible for delivering information security training and ensuring compliance with ISO-27001 certification standards. The role involves overseeing cybersecurity awareness campaigns, conducting staff training, and managing data security processes.

What you'll do:

• Oversee rollout of cybersecurity awareness campaigns and required annual training and policy attestations
• Monitor the participation of the cybersecurity awareness campaigns, ensure compliance, and support content preparation aligned with company and regulatory requirements
• Conduct in-person staff training and promote security awareness to educate employees on security protocols to reduce human error
• Monitor user training completions and work with user's manager to assure completion in a timely manner
• Maintain data classification and data retention documentation
• Manage and communicate processes for data labeling
• Act on findings related to data mishandling as determined by DLP systems, with direct user interaction
• Work closely with business units and individuals to help them navigate the complexities of applying ISMS requirements
• Liaison with end users and department leads to implement risk remediations and security controls
• Assure the appropriate use of data in relation to data security
• Assure data masking is in use where practicable
• Assure that device, application, and data inventories remain updated

What they're looking for:

• Minimum of 1 year experience in information security or a related field
• Strong critical thinking skills
• Basic computer skills
• Strong written and verbal communication skills
• Strong ability to drive task and organizing/maintaining records
• Ability to think creatively and strategically
• Passion for learning new and emerging technology
• Technology education or certifications, experience with enterprise IT environments, experience working with security regulatory requirements, and knowledge of security frameworks such as NIST CFS, NIST 800-53, ISO, PCI-DSS a plus