Compliance Analyst

Job Description:

Compliance Specialist Summary:

Signature Consultants is seeking a Compliance Specialist for an opportunity in Miami, FL. The Compliance Specialist will monitor legal and regulatory compliance by researching and communicating requirements and obtaining approvals. He or she will maintain compliance documentation related to Payment Card Industry (PCI) and Sarbanes Oxley (SOX) requirements. This position will provide current compliance information on 500 non-user IDs, 120 policies and procedures, 12 PCI requirements and their corresponding sub-requirements, 40 IT general controls, (including the 10 key IT SOX controls), and sensitive data analyses for the whole server environment, plus ad hoc departmental analyses (mainly PCI and GDPR vulnerabilities).

Responsibilities:

• Conduct SOX and PCI testing
• Maintain IT security policies and procedures and the non-user ID repository
• Assist in the Compliance Team’s Governance, Risk and Compliance, and GDPR efforts
• Ensure documentation related to generic non-user updates is complete and accurate; follow up with IDs owners to obtain pertinent information
• Maintain accurate information on the SOX compliance dashboard, track compliance and notify owners when their work is out of date
• Analyze sensitive data reports that are derived from the data loss prevention software. Reports are run against all file servers and individual departments as part of Norwegian’s data classification program. Work with owners to remove or safeguard sensitive data
• Conduct meetings with all members of IT and many business users of IT reports, to ensure timely compliance with SOX and PCI controls and requirements. Document results of the meetings and associated tests
• Primarily responsible for maintenance of the repositories for PCI testing, SOX testing, and non-user IDs. Maintain the repository for IT security policies and procedures with the Manager of IT Compliance and Risk
• Assist in the Compliance Teams efforts in User Access Review, SOX Compliance, GRC program, and GDPR compliance
• Perform other job related functions as assigned
• Constantly update Security Awareness documentation in light of changes in the discipline.

Qualifications:

• Must be comfortable updating management regarding compliance and escalating non-compliance to the Manager, IT Compliance when necessary
• Bachelor’s Degree in Computer Science or related field of study; or any equivalent combination of experience and training and/or certifications. ITIL Certification preferred, but not required.
• Exposure to PCI and SOX compliance a plus
• 3-5 years of related work experience in PCI and SOX compliance
• Knowledge of PCI compliance regulations and a basic understanding of IT related security and controls.
• Knowledge of or ability to maintain good understanding of the ITIL framework and follow guidelines closely
• Good communication and organizational skills - both written and verbal. Ability to work well under pressure and convert technical challenges and solutions into general terms for presentation and notification purposes
• Good command of English and business writing skills sufficient to compose corporate emails, policies and procedures
• Ability to maintain confidentiality when working with corporate inventory assets
• Good understanding of a computer system and its components

About Signature Consultants, LLC

Headquartered in Fort Lauderdale, Florida, Signature Consultants was established in 1997 with a singular focus: to provide clients and consultants with superior staffing solutions. For the seventh consecutive year, Signature was voted as one of the “Best Staffing Firms to Work For” and is now the 14th largest IT staffing firm in the United States (source: Staffing Industry Analysts). With 26 locations throughout North America, Signature annually deploys thousands of consultants to support, run, and manage their clients’ technology needs. Signature offers IT staffing, consulting, managed solutions, and direct placement services. For more information on the company, please visit www.sigconsult.com.