WHAT YOU'LL DOThe Senior IT Compliance Analyst contributes to achievement of P&L objectives for the business through providing a single point of accountability for IT compliance initiatives within Technology & Operations. This position is responsible for maintaining highly collaborative partnerships with Legal and Technology teams, while developing and implementing compliance programs designed to ensure that company data is protected and compliance program requirements are met for our Healthcare brands. Ascend Learning IT compliance programs ensure adherence to all legal requirements, HIPAA, FERPA, GDPR, Privacy Shield, and security best practices.
WHERE YOU'LL WORK This position will work a hybrid schedule from our office location in Leawood, KS preferred. Remote candidate within the United States will be considered.
HOW YOU'LL SPEND YOUR TIME- Collaborate with the IT Compliance Manager, Technology & Operations associates, Legal, and HR to align technical and compliance requirements to meet objectives.
- Provide expert guidance and recommendations for HIPAA privacy and security rules and other applicable federal and state health care privacy laws.
- Lead and facilitate third party audit projects for HIPAA and GDPR. Will be solely responsible for audit project, reporting, assessment, evidence collection and validation.
- Contribute to internal and third-party audits such as SOC 2 and CIS assessments as requested.
- Work directly with business units and technology partners to convey and drive compliance initiatives.
- Perform compliance and security reviews of customer contracts and complete security questionnaires as required.
- Assist and coordinate with the Legal team to ensure consistent strategy and implementation of IT compliance requirements.
- Provide support during acquisitions and all other IT compliance initiatives as needed.
WHAT YOU'LL NEED- High school diploma or GED required. Bachelor's degree in Information Security, Information Systems, Information Technology, Computer Science, Engineering, or equivalent work experience preferred.
- 5+ years of professional, industry-related experience in IT compliance/security roles
- 5+ years' experience in developing, implementing, and auditing Security & Compliance policies and controls
- 3+ years' experience completing security questionnaires
- Demonstrated subject matter expertise in HIPAA assessments and international compliance requirements
- Strong understanding of cybersecurity best practices, risks, and mitigations is required
- Strong logical, analytical, critical thinking, and problem-solving skills
- Highly motivated, driven, proven ability to facilitate the resolution of compliance and security gaps
- Excellent interpersonal skills as well as strong verbal and written communication skills; comfortable working with and presenting to colleagues, business partners, or technology leaders
- Proactive attitude towards anticipating problems, implementing solutions, and accomplishing goals
- Willingness to work in cross-functional teams and a desire to explore new approaches and ideas with enthusiasm
BENEFITS - Flexible and generous paid time off
- Competitive medical, dental, vision and life insurance
- 401(k) employer matching program
- Parental leave
- Wellness resources
- Charitable matching program
- On-site workout facilities (Leawood, Gilbert, Burlington)
- Community outreach groups
- Tuition reimbursement
