Security Compliance Analyst

Job Description

Training and development will be provided in all areas of the role as required.

• Security Assessment Management
• Manage vendor assessments to ensure that all evidence is appropriately processed and approved.
• Manage and maintain the RX domain of the RELX TPSAQ portal.
• Manage and maintain the Forward Calendar of assessment priorities.
• Manage the interface between RX security assessment processes and that of vendors.
• Supporting RX teams in day-to-day security assessment issues.
• BI Reporting.
• Team documentation Management.
• Team SLAs and KPI management.
• Deliver high quality risk-based reviews which identify and address root causes of issues arising, whilst mitigating emerging risk.
• Building and fostering close relationships with RX ISMs.
• Work collaboratively within all business areas and key stakeholders to ensure that the review scope and approach is appropriate and proactive.
• Escalation of high impact security issues to Security Compliance Manager.
• Analyze controls to ensure that specific RELX security and compliance requirements are met through evidence provided via SAQ processes.
• Working in a small team with opportunities to take on additional related responsibilities.

Ideal candidate profile:

Technical Skills:

• IT, compliance and/or information security background
• Ability to work across all levels of seniority within business teams to drive a working partnership.
• Must have strong analytical and critical thinking skills.
• Understanding of industry standards for IT security e.g. ISO27001/2, SOC 2, PCI DSS
• Basic understanding of IT security applications e.g. firewalls, intrusion detection, virus protection, etc.
• Basic understanding of IT security testing and vulnerability management
• Understanding Service Level Management
• Desired understanding of OneTrust portal
• Desired Security or IT certification or equivalent (CompTIA Security+ or equivalent)

Personal Skills:

• Ability to work across all levels of seniority within organization and suppliers to drive a working partnership.
• Good communications skills at all levels both oral and written.
• Good interpersonal skills.