Compliance Analyst

Job Description:
Training and Awareness

• Develop and deliver compliance training programs on data protection, cybersecurity best practices, and workplace security requirements using various formats (e.g., e-learning modules, webinars, workshops).
• Design engaging training materials aligned with regulatory requirements and organizational needs.
• Conduct awareness campaigns to educate employees about compliance policies and emerging cybersecurity threats.
• Evaluate feedback from training sessions to improve future programs.
• Develop communication strategies to promote organizational compliance awareness through newsletters, posters, or targeted email campaigns.

Policy & Standards Management

• Create, implement, and maintain cybersecurity policies and standards aligned with frameworks such as NIST CSF, ISO 27001, GDPR, or HIPAA.
• Conduct regular reviews of policies to ensure they address evolving threats and regulatory changes.
• Collaborate with IT teams to integrate policies into system designs and daily operations.
• Monitor adherence to cybersecurity policies through audits and assessments.
• Respond to non-compliance issues by recommending corrective actions.

SharePoint Site Management

• Manage the internal cybersecurity SharePoint site, which will serve as a centralized hub for cybersecurity resources, policies, and training materials.
• Implement best practices for SharePoint security by defining access permissions based on roles and responsibilities while adhering to the principle of least privilege.
• Maintain an organized site structure with logical hierarchies, metadata tagging for content classification, document version control, and consistent naming conventions.
• Update the site regularly with new resources such as policy updates, training schedules, or incident response guidelines.

Risk Assessments and Compliance Monitoring

• Assist in risk assessments, third-party audits, or inspections by providing documentation.
• Track incidents related to policy violations and recommended preventive measures.