NetCraftsmen, now BlueAlly

Compliance

• Understand security requirements to meet industry best practices and certifications
• Map requirements to security controls and actionable practices
• Design security controls and apply automation for evidence collection
• Manage compliance programs in centralized GRC system
• Facilitate and lead audits for ISO, SOC2, ITGC, PCI
• Maintain and update IS Policies, Standards and Procedures
• Coordinate ongoing compliance monitoring and evidence capture
• Contribute to risk assessments, reporting and remediation planning
• Support business continuity and disaster recovery compliance
• Support privacy program and Privacy Impact Analysis (PIA)

Compliance Analyst