Infromation Security Compliance Analyst (Analyst I, IM Security) Conduent
Germantown, MD

Job Description

Conduent is the world's largest provider of diversified business process services with leading capabilities in transaction processing, automation, analytics and constituent experience. We work with both government and commercial customers in assisting them to deliver quality services to the people they serve.

We manage interactions with patients and the insured for a significant portion of the U.S. healthcare industry. We are the customer interface for large segments of the technology industry and the operational and processing partner of choice for public transportation systems around the world.

Whether it's digital payments, claims processing, benefit administration, automated tolling, customer care or distributed learning - Conduent manages and modernizes these interactions to create value for both our clients and their constituents. Learn more at www.conduent.com.

Position Objective

Conduent is a business services firm with a focus on high-profile, high-threat private and public-sector customers who demand experience and proven security models to protect their data. We are seeking a Compliance Analyst who has experience evaluating the security and compliance posture of information systems environment. The Compliance Monitoring Center (CMC) focuses on helping the organization look deeper and see further into the security of the environment to help improve and embed controls across the company. The CMC will be responsible for evaluating evidence by combining advanced data analysis and technology tools to offer our clients a sustainable yet high quality and efficient approach to managing their compliance. This Compliance Analyst will be responsible for monitoring the controls environment across the organization against a standard predefined framework.

Job Responsibilities

* Monitor security controls against the Center for Internet Security (CIS) control framework to ensure compliance.
* Perform targeted security compliance analysis and reporting by analyzing collecting, analyzing and summarizing information and produce accurate and reliable information for decision making and to support compliance monitoring activities.
* Assist with preparation and updating of evidence collection and compliance monitoring evaluation criteria as necessary.
* Assist in monitoring progress of outstanding issues to ensure corrective actions are implemented to cure compliance violations or deficiencies.
* Assist with the implementation of security controls when compliance issues are identified, if needed.
* Assist with preparing and distributing periodic reporting. Assist in providing status updates on open compliance issues, assist in conducting investigations and ensure outstanding issues have been resolved in order to close all issues by the stated deadlines.
* Assist other security operations teams with additional tasks which may include but is not limited to:

o Assist with the maintenance of the standard procedures for the administration, backup, disaster recovery, and operation of the systems infrastructure.

o Assist with the maintenance of the technical architecture of the infrastructure systems, along with ensuring all components perform as expected to meet established service-level objectives for system uptime.

o Assist in the performance routine equipment checks and preventative maintenance. Maintain up-to-date documentation of designs and configurations. Be responsible for new, policy and security compliance testing.

o Assist with the maintenance of hardware or software revisions, applicable content, security patches, hardening, and documentation.

o Assist with the deployment of content (policies, signatures, or rules) for the security infrastructure. Coordinate and conduct event collection, log management, event management, and compliance automation.

o Assist in the response to day-to-day security change requests related to security operations.

o Assist with the performance of collateral duties and responsibilities for Audit Support of the infrastructure.

* Assist with any other duties as assigned by Conduent management.

Minimum Qualifications

* 3 years of related experience within professional services, compliance monitoring, risk management, or IT internal/external audit.
* Experience in IT controls monitoring for regulatory and compliance requirements like CIS, SOX, HIPAA, HITRUST, SSAE 16 - SOC 1 & SOC 2, PCI compliance - PCI DSS / PA-DSS, NIST, ISO 27001 & ISO 27002.
* Understanding of business processes, internal control risk management, IT controls and related standards.
* Experience in PowerPoint, Word, Excel; experience with Visio and MS Project.
* Communication skills (interpersonal, verbal, presentation written, email). Experience to write report segments and to participate in presentations.
* Familiarity with security, workflow and collaboration tools such Nessus Tenable, Splunk, Eracent, NNT, SharePoint and ServiceNow (Snow) is a plus.
* Positive attitude, team player, self-starter; takes initiative, ability to work independently and effectively with all levels of staff and management both internally and externally.
* Flexibility to travel up to 20% or as required.

Education

* B.S. in Accounting Information Systems, Management Information Systems or Computer Science or related field at a minimum is required.

Professional Certifications

IT Security Certifications such as CIPP (Certified Information Privacy Professional), CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information System Auditor), CISSP (Certified Information Security Professional) or CISM (Certified Information Systems Manager) is a strong plus.

Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. People with disabilities who need a reasonable accommodation to apply for or compete for employment with Conduent may request such accommodation(s) by clicking on the following link, completing the accommodation request form, and submitting the request by using the �Submit� button at the bottom of the form. For those using Google Chrome or Mozilla Firefox please download the form first: click here to access or download the form.

'1962394