Pay Transparency: Our salary ranges are structured to provide opportunities for growth and advancement within a role. As a result, most new hires are placed between the minimum and midpoint of the range based on qualifications and experience, while the top of the range is generally reserved for employees who have demonstrated sustained expertise and performance in the position. The anticipated pay for new hires entering as a Sr. IT Procurement & Compliance Analyst is between $87,500 to $109,350. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications, and company tenure & equity. In addition to base compensation, this role is eligible for an annual incentive plan based on company performance and individual performance.

Sr IT Procurement & Compliance Analyst

The Senior IT Procurement & Compliance Analyst supports IT budget, procurement, vendor management, compliance, privacy, risk, and governance activities through effective coordination, documentation, analysis, and oversight. This role applies knowledge of procurement practices, technology controls, privacy and data protection principles, and recognized frameworks and standards such as COSO, COBIT, NIST, ISO, SOC, HIPAA, and GLBA to support compliant and effective IT operations, partnering with IT Security, Legal, Privacy, Finance, vendors, auditors, and business teams on audit readiness, third-party risk, policy administration, software licensing documentation, Business Continuity and Disaster Recovery governance, and related process improvement efforts.

Essential Duties:

• Performs IT procurement activities in compliance with internal policies and external regulations, including gathering business requirements, identifying and pre-qualifying potential vendors, developing and distributing RFPs and RFQs, collecting and evaluating proposals, quotes, bids, or other information, and recommending vendors best suited to meet the Company's IT requirements
• Handles tactical purchasing operations such as issuing purchase orders, processing and coding invoices, preparing check requests, and reconciling purchases
• Supports third-party risk management and IT governance compliance activities by conducting vendor due diligence, risk reviews, security and privacy questionnaires, contract compliance tracking, and monitoring vendor obligations, regulatory requirements, governance framework alignment, audit activity, remediation efforts, and related risk and compliance metrics
• Coordinates recurring governance and compliance activities, such as risk reviews, policy reviews, vendor review meetings, audit status meetings, management reporting, and meetings with vendors, auditors, business staff, IT staff, and Legal
• Leads project initiatives, process improvements, audit preparation efforts, privacy-related activities,
• Coordinates Business Continuity and Disaster Recovery governance by maintaining plan documentation in SharePoint, coordinating and participating in annual tabletop exercises, retaining evidence, tracking action items, and reporting exercise results
• Assists with IT policy administration, publication, and communication
• Supports issue and remediation management by documenting corrective action plans, assigning ownership, monitoring due dates, and validating closure evidence in coordination with responsible teams
• Supports the organization's privacy program by assisting with privacy-related processes, maintaining compliance documentation, assisting with incident tracking and risk assessments, and partnering with business teams to help protect sensitive and personal information
• Provides guidance, training, and support to less experienced team members on procurement processes, compliance documentation, vendor records, and recurring governance activities
• Performs other related duties and responsibilities as assigned

Required Knowledge, Skills and Abilities:

• Possesses knowledge of COSO, COBIT NIST, ISO, SOC, HIPAA, GLBA and other control frameworks
• Knowledge of privacy and data protection principles
• Advanced organizational and time management skills with the ability to work independently
• Ability to build and maintain effective working relationships at all levels
• Strong Microsoft Office skills and beginner SharePoint skills

Required Education and Experience:

• 2 years as a procurement or compliance analyst
• Experience in purchasing, sourcing or procurement
• Experience supporting privacy, compliance, risk, or audit programs
• Experience with vendor management and contracting
• Bachelor's Degree in related field or equivalent related experience
• Or equivalent military experience

Preferred Education and Experience:

• Insurance industry experience

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time

#USAL2