IT Security Compliance/Controls Analyst

IT Security Compliance/Controls Analyst needs 2-years experience working in an Information Technology/Information Security role
IT Security Compliance/Controls Analyst requires:
Security and/or technical certifications preferred (e.g. CISM, CISA, CISSP)
Basic knowledge of information technology, information security controls
IT Security Compliance/Controls Analyst duties:
Answer client requests for information about IT/information security controls via questionnaires
Support the NIST product risk assessment (RMF)
Continuous Monitoring
Acknowledge receipt of all incoming requests (e.g. Customer IT Forms and Information Security Assessment mailboxes, etc.)
Inform sender of anticipated completion date. Justify dates that extend beyond client expectations
Complete all request by the due date
Inform manager of hinderances to completing the request (e.g. conflicts, no response from SMEs, PTO, etc.)
Inform manager if request will not be completed on time (e.g. two days in advance)
With approval from manager, inform sender if request will not be completed by due date
Coordinate with appropriate internal team members to complete response (e.g. legal, product teams, sales, etc.)
Prepare and present monthly metrics to management on quantity of customer assessments and questions per assessment and remediation commitments.