IT SYSTEMS COMPLIANCE ANALYST | REMOTE

ARC Group has an immediate opportunity for an IT Systems Compliance Analyst! This position is 100% remote working eastern time zone business hours. This is a contract position initially running through March 2027 with potential to extend longer or convert to FTE. This is a fantastic opportunity to join a well-respected healthcare organization offering tremendous career growth potential.

At ARC Group, we are committed to fostering a diverse and inclusive workplace where everyone feels valued and respected. We believe that diverse perspectives lead to better innovation and problem-solving. As an organization, we embrace diversity in all its forms and encourage individuals from underrepresented groups to apply.

100% REMOTE! Candidates must currently have PERMANENT US work authorization. Sorry, but we are not considering any candidates from outside companies for this position (no C2C, 3rd party / brokering).

Description

IT Systems Compliance Analyst are responsible for monitoring the organization’s compliance programs for Infrastructure and Cloud Services. This includes overseeing and evaluating government and commercial product and program regulations and requirements to promote and sustain organization integrity. The position is also responsible for identifying, defining, communicating, and managing the compliance program requirements and key performance indicators for government and commercial business. IT Systems Compliance Analysts are responsible for maturing the Compliance Program.

Resource will interface with various audit and security personnel, providing policies, procedures, and device evidence required for specific platforms. Collaboration with technology owners on application of policies, procedures and audit requirements. Interpret policies and procedures for accuracy and technical sensibility. Manage documentation and evidence repositories for access during audit events (Automated Scans, Manual Scripting, etc.). Develop policies and procedures and ensure that the current procedures are updated with current information and available for review for compliance with CMS, ARS, HITRUS, SOC2, DISA policies, procedures, and standards.

Ability to navigate the DOD DISA public-facing site to include the STIGS Document Library & the STIG Viewer application (xccdf). Understanding of NIST 800-XX controls. Participate in discussions with all levels of leadership to articulate current state of the program. Advise on mitigation and remediation strategies for any variances or ensure they are documented in a Corrective Action Plan (CAP). Perform hardware and software evaluations to maintain established baseline integrity. Provide evidence to assist with internal and external audits. Ensure self-inspection checklists are completed against policies, procedures, and evidence for compliance audits. Ensure self-inspection checklists are completed against defined infrastructure platform baselines. Gather evidentiary documentation to support audit findings from compliance audits periodically throughout the year. Ability to navigate a SQL relational database: clauses, expressions, predicates, queries, and statements. Working experience with Excel. Other duties as assigned.

Additional Required Qualifications:

• Four or more years demonstrated proficiency and experience in design, implementation, administration, monitoring and troubleshooting technology.
• Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response and identity, access and configuration management.
• Competent working in one or more environments highly integrated with an operating system.
• Extensive experience implementing and administering/managing technical solutions in major, large-scale system implementations.
• Proficient working with various audit infrastructure tools/technologies such as Nessus, ACAS, WIZ, GAS and Nexpose.
• Knowledge of audit and assessment activities and processes such as configuration management.
• Strong team-oriented interpersonal skills with the ability to interface with a broad range of people and roles.

Must have:

1. Experience implementing and supporting the following Security Frameworks: NIST 800-53, DISA Security requirements, CIS, HITRUST, PCI for a major operating system or component such as FW, RHEL, Windows, DB, WEB in a large enterprise environment.
2. Familiarity with basic enterprise audits, including SOC2, FISMA, MAC ARS, DOD.
3. Experience interfacing with internal and external auditors.
4. Familiarity with utilizing Cloud tools such as WIZ, GAS and TeleForm templates.

Required Education:

Bachelor’s degree in an IT related field or equivalent work experience.

Preferred:

• Experience as a primary liaison between Infrastructure Service organizations, Audit and Security organizations.
• Managed requirements within simultaneous two-three audits.
• This position has some accountability to consult independently with operational areas and senior leadership across the Enterprise.
• Identifying, defining, communicating, and managing the compliance audit program requirements and performance indicators – such as security controls from NIST800-53 and DISA STIGs.
• Certifications: CompTIA Security Plus or CISSP.

Would you like to know more about our new opportunity? For immediate consideration, please send your resume directly to John Burke at johnb@arcgonline.com or apply online while viewing all of our open positions at www.arcgonline.com.

ARC Group is a Forbes-ranked a top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We have achieved this by understanding both our candidate's and client's needs and goals and serving both with integrity and a shared desire to succeed. At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status. If you require accommodations during the recruitment process, please let us know. Position is offered with no fee to candidate.