RedMatter Solutions is hiring: Security Compliance Analyst in Arlington

Job Description:

RedMatter Solutions is seeking a detail-oriented and experienced Mid-Level Security Compliance Analyst to join our dynamic team. This remote role involves ensuring our compliance with industry regulations, improving our security posture, and working closely with various teams to manage and mitigate risks. As an employee of RedMatter Solutions based in Rosslyn, Virginia, you will play a crucial role in maintaining our high standards of security and compliance.

Candidate must be a US citizen (green cards are not accepted) and able to obtain a public trust clearance.

Key Responsibilities:

• Compliance Management: Monitor and ensure compliance with relevant security standards and regulations, such as GDPR, HIPAA, and FISMA.
• Risk Assessment: Conduct regular risk assessments and vulnerability scans to identify potential security threats and recommend mitigation strategies.
• Policy Development: Develop, implement, and maintain security policies, procedures, and guidelines to ensure they meet regulatory requirements and best practices.
• Audits and Reviews: Coordinate and conduct internal and external audits and prepare reports detailing findings and recommendations for improvements.
• Incident Response: Assist in the development and implementation of incident response plans. Respond to security incidents and conduct post-incident analysis to prevent future occurrences.
• Training and Awareness: Conduct security training and awareness programs to ensure all employees understand and comply with security policies and procedures.
• Collaboration: Work closely with IT, legal, and other departments to ensure comprehensive security measures are in place. Provide guidance and support on security-related matters.

Qualifications:

• Minimum of 4 years of experience in security compliance or a related field
• Strong knowledge of security regulations and standards, such as GDPR, HIPAA, FISMA, ISO 27001, and NIST
• Experience with risk assessment and management
• Proven ability to develop and implement security policies and procedures
• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills
• Ability to work independently in a remote environment
• Relevant certifications (e.g., CISSP, CISM, CRISC) are a plus