Security Compliance Analyst I
Spotted 1h ago
Job details
- Level
- Entry level
- Experience
- 1+ year
- Education
- Bachelor's degree
- Posted
- Oct 19, 2026
- Last confirmed open
- Oct 20, 2026
Job description
About this role
Your Responsibilities
- Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities.
- This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program.
- The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.
Key Responsibilities
- Support audit and assessment cycles by maintaining request lists, coordinating evidence collection, tracking deadlines, scheduling walkthroughs, documenting questions, and following up on open items.
- Work with control owners to collect complete, accurate, and timely evidence; perform an initial quality review before materials are submitted for further review or provided to auditors.
- Help educate control owners on control intent, evidence expectations, recurring deadlines, and documentation standards.
- Support interactions with internal and external auditors, including meeting coordination, request clarification, walkthrough preparation, and tracking follow-up questions and commitments.
- Maintain compliance documentation such as control narratives, evidence inventories, procedures, testing records, issue logs, and remediation trackers.
- Identify missing evidence, documentation inconsistencies, and potential control gaps; escalate concerns and assist with remediation follow-up.
- Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
- Prepare and maintain draft responses to client security questionnaires and due-diligence requests using approved information about Lockton’s security program and controls.
- Assist with client and prospective-client security discussions by preparing materials, documenting questions, and coordinating responses with subject-matter experts.
- Maintain reusable answer content and supporting documentation for client assurance activities.
- Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders on compliance-related requests and projects.
- Stay current on cybersecurity compliance concepts, audit practices, and relevant industry developments.
Qualifications
- 1-3 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, client assurance, or a related field.
- Experience supporting audits, assessments, control testing, evidence collection, or remediation tracking.
- Experience coordinating with technical or business stakeholders to obtain documentation and meet deadlines.
- Ability to understand control requirements and communicate evidence expectations clearly to control owners.
- Experience contributing to client security questionnaires, due-diligence requests, or similar written responses.
- Foundational knowledge of security controls, risk concepts, audit evidence, and cybersecurity compliance frameworks or assurance programs.
- Strong written and verbal communication skills, attention to detail, and the ability to self-direct, prioritize tasks independently, and organize multiple assignments and deadlines.
- Sound judgment and discretion when handling confidential, sensitive, or restricted information.
- Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent practical experience.
Preferred Qualifications
- Familiarity with reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.
- Exposure to SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.
- Experience with governance, risk, and compliance platforms, evidence repositories, questionnaire-response tools, or workflow systems.
- Experience in a regulated, professional-services, financial-services, insurance, or similarly complex environment.
- Success in This Role Success will be demonstrated through reliable audit support, accurate and timely evidence, effective follow-up with control owners, clear documentation, consistent client-questionnaire responses, and continued growth in security compliance knowledge and judgment.
Interested in this role?Continue on LinkedIn to apply.
Apply on LinkedIn