[Remote] Senior Analyst: Security Compliance & Assurance

Note: The job is a remote job and is open to candidates in USA. Jack Henry is hiring a Senior Analyst, Security Compliance & Assurance to coordinate security compliance activities, validate evidence, track remediation, and provide oversight across audit, risk, cloud compliance, and vulnerability governance. The role supports control owners and audit readiness while helping ensure security and compliance activities align with company policies, standards, and applicable frameworks.

Responsibilities

• Serves as the central point of contact for internal, external, and regulatory audits (SOC, FFIEC, SOX, ISO, PCI, NIST)
• Manages the end-to-end audit lifecycle, including evidence collection via centralized tooling, control interpretation, and audit readiness activities
• Supports control owners through first-line assurance by validating control design and operating effectiveness for accuracy and audit quality. Tracks compliance gaps, audit findings, and remediation actions to ensure timely closure
• Enables cloud-native compliance and SOC readiness for Google Cloud and Azure environments. Partners with product teams to embed compliance requirements early in the lifecycle and clarifies shared responsibility models through technical documentation
• Provides oversight for vulnerability management by monitoring SLA performance and managing risk exceptions. Supports broader risk assurance activities, including third-party reviews, client due diligence, and the documentation of risk treatment decisions
• Maintains security governance artifacts by consolidating disparate business unit procedures into a unified framework aligned with corporate policies and standards
• Develops leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes to drive continuous improvement within the Security Compliance & Assurance function
• Participates in governance, risk, compliance, and security initiatives for Jack Henry
• Performs other job duties as assigned

Skills

• Bachelor's degree in Information Security, Information Technology, Risk Management, or a related field
• Minimum of 6 years of experience coordinating IT compliance and audit activities and supporting compliance requirements for audits
• Strong working knowledge of cloud-native compliance expectations across multiple platforms
• Advanced understanding of SOC, FFIEC, ISO, PCI, SOX, or NIST control requirements and mapping
• Skilled in evidence quality review and process optimization
• Strong ability to coordinate audit readiness independently
• Capability to evaluate remediation plans and track SLA adherence
• Advanced analytical and data reporting abilities
• Ability to research and resolve questions in a timely manner
• CISA, CISM, CCSK, CISSP, GIAC, Cloud-related certifications (Google Cloud, Microsoft Azure)
• Strong communication, decision-making, and project management skills
• Ability to maintain confidentiality when working with confidential materials and employee information
• Ability to interpret control requirements and guide business partners

Benefits

• Remote work within the United States, except California.

Company Overview