Technology Compliance Analyst

At Systems Engineering, our mission is to enable the exceptional with our clients, employees, and the community.

As a result, we continue to invest heavily in being the premier technology employer in Northern New England. We are 100% employee-owned which gives us the unique opportunity to combine shared equity with empowerment to create an incredible career development opportunity.

We have an immediate opening for a Technology Compliance Analyst to join the growing Advisory Services team. Technology Compliance Analysts draw on and build technical and organizational skills to help clients develop, improve, and execute their information security programs to support compliance initiatives and improve the overall security posture of organizations. The Technology Compliance Analyst will work with clients and internal resources to track and aid in compliance and governance tasks on a recurring basis to deliver professional services in a variety of areas, including:

• Information security risk assessment information gathering.
• Information security program development, review, and maintenance.
• Assistance with compliance and gap analysis reviews with common frameworks (NIST Cybersecurity Framework, NIST 800-53, 800-171, NYS DFS, CMMC, etc.).
• Utilize Governance, Risk, and Compliance (GRC) tools to generate, analyze, and distribute compliance-based reporting.
• Compliance activity tracking and planning.
• Preparation of reporting for client compliance audits.
• Provide cybersecurity representation in client tech committee meetings.

Responsibilities

• Develop and maintain information security policies consistent with client practices.
• Develop and maintain acceptable use policies for clients, assist with organization-wide deployment of policies.
• Facilitate the creation and maintenance of these governance documents, identify compliance gaps, and contribute to risk assessments.
• Regularly compile, review, and direct actions based on client compliance reports.
• Work with technology consultants to determine necessary changes for clients to technology, procedures, and policies to secure the network, and meet compliance requirements.
• Provide input into the creation of detailed project plans, work assignments, and target dates for clients.
• Conduct regular reviews and actions based on client compliance reports.
• Provide input into the creation of detailed project plans, work assignments, target dates for clients.
• Stay abreast of the ever-changing cybersecurity regulatory environment.

Technical Skills & Experience:

• BS or similar degree preferred, greater progressively responsible experience in technology, IT security, consulting or audit environments acceptable in lieu of formal education. Little experience required with a degree; 3-4 years’ professional experience required without.
• CISSP/CCSP/CIPT or similar certifications highly valued; pursuit may begin after hiring.
• Experience with HIPAA, GLBA, PCI-DSS, GLBA, and/or CMMC compliance desired.
• Experience with cloud security technologies, namely Microsoft Office 365, desired.

Technical Leadership Skills:

• Ability to distil complex technical information into broadly comprehensible concepts, and vice versa.
• Experience facilitating/conducting risk assessments and/or audits preferred.
• Must be an excellent written and oral communicator, ability to encourage critical thinking, asking open ended questions.
• Ability to lead a small cross-functional team with minimal direction or oversight.
• Project management, consulting, and audit experience strongly preferred.
• Strong organizational, critical thinking and analytical skills.
• Passion for security, compliance, and governance required.
• This is a hybrid role with a required onsite presence at our offices at least 2 days a week, with occasional travel and onsite engagements with clients. Standard work hours are Monday-Friday, 8am-5pm.

Our Culture & Benefits:

Systems Engineering has three office locations: Our Portland, Maine office is located in the heart of the Old Port in downtown Portland positioned centrally to the waterfront, trails, parks, and restaurants. Our New Hampshire Office is located in the Brady Sullivan Tower just steps from downtown Manchester. Our Pineland Farms Office is located at Durham Hall on the Pineland Farms Campus, New Gloucester, Maine.

Being 100% employee-owned, the employee-owners of Systems Engineering are its most valuable resources who have collectively made Systems Engineering a Best Places to Work Company in Maine for a decade. We pride ourselves on delivering great outcomes for our Culture, Clients, and our Community by cultivating a culture focused on continuous learning, community impact, and Employee-Ownership.

In addition to a competitive salary, our benefits include:

• Employee Ownership (Employee Stock Ownership Plan) – As an employee-owner, you directly contribute to the strategic direction, growth, workplace culture, and future of the company.
• Employer 401k matching contributions.
• Profit-Sharing.
• Competitive medical, dental, life, and short & long-term disability insurance.
• Paid Time Off starting with 17 days PTO, nine paid holidays, and two weeks paid parental leave.
• Community Engagement benefits including (8) hours of paid community volunteer time & employer-charitable match.
• Engaging wellness programs including onsite health coaching & onsite fitness facilities.
• Career mobility and professional development, with employer-supported training, learning, and certification opportunities.
• Dynamic, fun, and active community culture.
• Business casual work attire.
• Hybrid Workplace, which fosters collaboration, mentorship, and training & development opportunities across our organization.
• Employer-provided parking at our office locations.

Due to the nature of our business and the requirements of ITAR regulations, this role may require access to controlled information and technology. Candidates must be U.S. citizens or lawful permanent residents and be willing to undergo a thorough background check as part of the employment process.

Systems Engineering values diversity and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other status protected by law.