Senior Compliance and Audit Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $95.1k - $146.3k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zayo Group

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2007

📦 Logistics

💼 Consulting

🏥 Healthcare

💰 $92.9M Grant on 2023-06

Logistics • Consulting • Healthcare

Zayo Group is a leading global provider of communication infrastructure services, offering a wide range of products and services including fiber & transport, network connectivity, mobile infrastructure, private networks, and various managed services like SD-WAN and security solutions. Zayo's extensive network spans over 145,000 route miles of fiber and connects over 1,500 data centers worldwide. Its services cater to various industries including education, finance, healthcare, retail, media & entertainment, and more, helping businesses achieve scalable and secure connectivity solutions. With a focus on innovation and customer success, Zayo continuously invests in network expansion and service delivery excellence.

📋 Description

• Respond to customer security inquiries, due diligence requests, security questionnaires, and RFP/RFI security sections using approved content and guidance • Manage customer security, audit evidence, contract review, and third-party risk requests through ServiceNow or approved systems • Coordinate with Security, Legal, Procurement, Sales, Product, business owners, and technical subject matter experts • Prepare accurate customer-facing responses concerning security controls, policies, standards, certifications, audit reports, privacy practices, and compliance activities • Assist with customer and vendor contract reviews involving information security, privacy, audit rights, incident notification, data protection, compliance, and third-party requirements • Compare customer and vendor security requirements against organizational policies, standards, controls, and risk guidance • Identify non-standard commitments, control gaps, policy conflicts, unclear requirements, and risk indicators and escalate them • Coordinate, validate, track, and document audit evidence requests and approvals • Support third-party risk management activities, including vendor security reviews, due diligence, risk assessments, renewal reviews, and ongoing monitoring • Review vendor questionnaires, certifications, audit reports, policies, and security documentation • Track third-party risk assessment status, questions, documentation, approvals, risk decisions, exceptions, remediation, and follow-up actions • Develop and maintain publicly appropriate Trust Center content • Maintain response libraries, standard security language, FAQs, Trust Center materials, third-party risk guidance, and customer assurance content • Maintain records of inquiries, responses, contract reviews, evidence, Trust Center updates, assessments, escalations, approvals, and outcomes • Monitor requests for timely completion and accurate reporting on status, volume, aging, and recurring themes • Identify recurring questions, vendor risk themes, response gaps, evidence trends, content needs, and process issues and recommend improvements • Support internal process documentation and guidance

🎯 Requirements

• Bachelor’s degree in Information Systems, Cybersecurity, Risk Management, or a related field, or equivalent professional experience • Minimum of six (6) years of experience in information security, compliance, customer assurance, third-party risk management, audit support, contract support, customer service, vendor management, or a related role • Familiarity with ISO 27001, NIST SP 800-171, GDPR, and SOC 2 required • Experience responding to customer security inquiries, due diligence requests, security questionnaires, RFP/RFI security sections, or similar information requests • Familiarity with security-related contract topics, including information security requirements, audit rights, incident notification, data protection, privacy, third-party obligations, and compliance requirements • Ability to read and interpret organizational policies, standards, procedures, customer requirements, vendor documentation, audit materials, and contract language • Strong written communication skills for clear, accurate, and professional responses • Strong attention to detail and ability to identify inconsistencies, missing information, unclear language, non-standard commitments, and escalation items • Ability to collaborate with Legal, Security, Procurement, Sales, business owners, and technical subject matter experts • Strong organizational, documentation, and time management skills • Proficiency with Microsoft Office, ServiceNow, knowledge management tools, and collaboration platforms • Must be currently authorized to work in the United States on a full-time basis • Position is not eligible for employer-sponsored work authorization, including OPT, TN, H1B, or other work visas • Experience with common controls, control mapping, or cross-framework control alignment preferred • Experience with ServiceNow or similar ticketing, workflow, case management, or risk management tools preferred • Experience supporting third-party risk management, vendor due diligence, supplier risk assessments, or vendor security reviews preferred • Professional certifications in cybersecurity, compliance, or risk-related areas preferred but not required

🏖️ Benefits

• Excellent Health, Dental & Vision Insurance • Retirement 401(k) Savings Plan • Generous paid time off policy including paid parental leave • Potential eligibility for a discretionary annual incentive plan • Life insurance • Disability retirement plans • Equal opportunity employment • Reasonable accommodation during the employment selection process