Security Compliance Analyst

Primary Duties

• Update and improve security policies & procedures.

• Perform user access reviews.

• Perform third-party risk management reviews and other forms of risk management.  

• Conduct or assist with compliance audits.

• Foster continuous improvements that enhance overall security & compliance.

• Assist with the production of security program metrics.

Governance

• Update security policies and procedures to enhance security & compliance, meet evolving customer and partner requirements, meet evolving regulatory mandates, and address IT risk areas.

• Audit and improve compliance with Comscore’s policies.

• Assist with gathering operational statistics in support of program metrics.

Access Reviews

• Support Comscore’s user access review process and tool.

• Reliably perform user access reviews to ensure positive audit outcomes.

• Improve access controls and the access management process.  

Risk Management

• Contribute to the Comscore Risk Register process to identify, document, treat, or escalate risk areas.

• Leverage Comscore’s vendor risk management tool to conduct third party risk management security reviews.

• Update vendor questionnaires to address new risk areas.

Compliance

• Monitor user activity, internal processes, and infrastructure for compliance with Comscore policies.

• Develop security controls to improve compliance.  

• Contribute to security awareness training.

• Collaborate with external auditors and the Internal Audit team to support ISO 27001/27701 and Sarbanes Oxley (SOX) audits.

Qualifications/Experience/Educational Qualifications

• Bachelor's degree in information systems or equivalent work experience.

• Industry Certifications (e.g. CISA).

Technical Competency

• Knowledge of information security principles, including access control and risk management.

• Experience performing access reviews and using access review tools. Familiarity with Conductor One is preferred.

• Knowledge of GRC tools. Familiarity with Drata is a plus.

• Experience in developing, documenting and maintaining security and compliance policies and procedures.

• Experience with information security management frameworks, such as ISO 27001, NIST, GDPR, CCPA, or other privacy regulations.

• Prior audit experience. Familiarity with ISO 27001 and ISO 27701 preferred.

• Experience in developing, documenting and maintaining security procedures.

• Experience coordinating BC/DR projects and knowledge of common DR practices.

• Experience with ticketing systems (familiarity with Jira preferred).

• Experience with Windows and Linux operating systems.

• Experience with cloud service providers (AWS preferred).  

• Experience with Active Directory.

• Experience with Power Shell.

• Experience with Identity and Access Management and Privilege Access Management tools.

Occupational Personality

• Ability to follow established procedures reliably and with attention to detail.

• Ability to work well under minimal supervision.

• Strong written and verbal communication skills.

• Strong analytical and problem-solving skills.

• Continuous improvement mindset.

• Ability to document procedures.

• Strong team-oriented interpersonal skills.

• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.

• Ability to interface effectively with a broad range of people and roles, including senior leadership and technical personnel.

• Ability to work under stress and handle multiple high-pressure situations simultaneously.

• Ability to work in meetings during US hours as needed (Pacific and Eastern Time)

About Comscore:

At Comscore, we’re pioneering the future of cross-platform media measurement, arming organizations with the insights they need to make decisions with confidence. Central to this aim are our people who work together to simplify the complex on behalf of our clients & partners. Though our roles and skills are varied, we’re united by our commitment to five underlying values: Integrity, Velocity, Accountability, Teamwork, and Servant Leadership. If you’re motivated by big challenges and interested in helping some of the largest and most important media properties and brands navigate the future of media, we’d love to hear from you.   

Comscore (NASDAQ: SCOR) is a trusted partner for planning, transacting and evaluating media across platforms. With a data footprint that combines digital, linear TV, over-the-top and theatrical viewership intelligence with advanced audience insights, Comscore allows media buyers and sellers to quantify their multiscreen behavior and make business decisions with confidence. A proven leader in measuring digital and set-top box audiences and advertising at scale, Comscore is the industry’s emerging, third-party source for reliable and comprehensive cross-platform measurement. To learn more about Comscore, please visit Comscore.com.

Comscore is committed to creating an inclusive culture, encouraging diversity.

*LI-SS1