The Senior Analyst, Security Compliance & Assurance, under minimal guidance, serves as a key member of the Security Compliance & Assurance team, supporting control owners across the organization by coordinating security compliance activities, validating evidence quality, tracking remediation, and providing transparency across audit, risk, cloud compliance, and vulnerability governance initiatives. This role focuses on assurance, oversight, and coordination, ensuring that security and compliance activities are performed in accordance with company policies, standards, and applicable frameworks. The ideal candidate must be able to travel up to 5% for meetings or conferences.
This position may be worked remotely within the United States, with the exception of California.
This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM).
All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity.
What you'll be responsible for:
• Serves as the central point of contact for internal, external, and regulatory audits (SOC, FFIEC, SOX, ISO, PCI, NIST).
• Manages the end-to-end audit lifecycle, including evidence collection via centralized tooling, control interpretation, and audit readiness activities.
• Supports control owners through first-line assurance by validating control design and operating effectiveness for accuracy and audit quality. Tracks compliance gaps, audit findings, and remediation actions to ensure timely closure.
• Enables cloud-native compliance and SOC readiness for Google Cloud and Azure environments. Partners with product teams to embed compliance requirements early in the lifecycle and clarifies shared responsibility models through technical documentation.
• Provides oversight for vulnerability management by monitoring SLA performance and managing risk exceptions. Supports broader risk assurance activities, including third-party reviews, client due diligence, and the documentation of risk treatment decisions.
• Maintains security governance artifacts by consolidating disparate business unit procedures into a unified framework aligned with corporate policies and standards.
• Develops leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes to drive continuous improvement within the Security Compliance & Assurance function.
• Participates in governance, risk, compliance, and security initiatives for Jack Henry.
• Performs other job duties as assigned.
What you'll need to have:
•Bachelor's degree in Information Security, Information Technology, Risk Management, or a related field.
•Minimum of 6 years of experience coordinating IT compliance and audit activities and supporting compliance requirements for audits.
•Strong working knowledge of cloud-native compliance expectations across multiple platforms.
•Advanced understanding of SOC , FFIEC, ISO , PCI, SOX, or NIST control requirements and mapping.
•Skilled in evidence quality review and process optimization.
•Strong ability to coordinate audit readiness independently.
•Capability to evaluate remediation plans and track SLA adherence.
LICENSING/CERTIFICATIONS:
• What would be nice for you to have:
• Advanced analytical and data reporting abilities.
• Ability to research and resolve questions in a timely manner.
• CISA, CISM, CCSK, CISSP, GIAC, Cloud-related certifications (Google Cloud, Microsoft Azure).
• Strong communication, decision-making, and project management skills.
• Ability to maintain confidentiality when working with confidential materials and employee information.
• Ability to interpret control requirements and guide business partners.
If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're looking for passionate, driven individuals who align with our mission and can bring unique perspectives to our team.
