Senior Security and Compliance Analyst

4 Weeks ago • 3 Years +

About the job

SummaryBy Outscal

Morningstar seeks a Senior Security & Compliance Analyst with 3+ years of experience in infosec or governance. Responsibilities include RFP responses, risk & compliance analysis, third-party vendor reviews, and supporting compliance initiatives like SOX, SOC2, PCI-DSS, and SEC. Strong communication, organizational, and analytical skills are essential. Familiarity with security & resilience frameworks (ISO 27001, ISO 22301, NIST) and IT audits is required.

About the Role

• We are looking for new colleagues to join our Global Security, Privacy, and Resilience Services team.
• The goal of the team is to support the entire global Morningstar business, break down silos between the different functional areas, and improve customer service for internal stakeholders.
• While the role will cover several domains like Privacy, Compliance, Governance, Resilience (Business Continuity, IT Disaster Recovery), experience in all these areas is not required. The successful candidate will have knowledge and hands-on experience in a minimum of 2 of the above domains.

Job Responsibilities

• Respond to customer RFP’s, RFI’s, Resilience, Privacy, and Security questionnaires.
• Collect and analyze security metrics related to risk and compliance for presentation to senior management.
• Support Third Party Vendor Reviews for potential Security, Resilience, and Privacy risks.
• Work and communicate with broad range of global employees and provide support for any interactions with the Security, Privacy, and Resilience teams.
• Work with business units and product teams to assist in completing Location Risk Assessments and IT Disaster Recovery Plans.
• Support Morningstar’s compliance related responsibilities (SOX, SOC2, PCI-DSS, SEC) by managing collection of audit evidence.
• Assist with documenting and regularly reviewing security, processes, and procedures.
• Training and Awareness – support training and awareness programs
• Advise business partners, on policies and standards.
• Respond to daily operational tickets following defined SOPs.

Qualifications

• A bachelor’s degree in computer science or related field.
• Strong communication skills.
• Verbal and written English skills at a professional level.
• Strong organizational skills and the ability to multitask and switch priorities with short notice.
• Familiarity with security and resilience frameworks (ISO 27001, ISO 22301, NIST, etc.) and general security and resilience concepts.
• Familiarity with IT audits and risk assessments.
• Understanding of enterprise-scale infrastructure, technologies, and applications, both on-premises and in the public cloud.
• Strong business analysis, research, and analytical skills.
• Enthusiasm to learn and gain hands-on experience across different domains.

Nice to have

Any of the skills below.
• Previous experience in information security and / or security governance (3+ years).
• Knowledge of public cloud technologies and principles, specifically AWS.
• Previous experience in Resilience, including Risk Assessments, Business Impact Analysis, Business Continuity and IT Disaster Recovery planning and testing (1+ years).
• Previous experience in Data Privacy (documenting privacy policies, processes and procedure, Data privacy impact assessments, assessment of 3rd party risks, etc. (1+ years).
• A certification in a relevant domain is a plus.

 

315_Sustainalytics SRL Legal Entity

Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We’ve found that we’re at our best when we’re purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.

Maharashtra, India (Hybrid)

Bucharest, Romania (Hybrid)

Maharashtra, India (Hybrid)

Illinois, United States (Hybrid)

Illinois, United States (Hybrid)

Ontario, Canada (Hybrid)

North Holland, Netherlands (Hybrid)

Bucharest, Romania (Hybrid)

Illinois, United States (Hybrid)

View All Jobs

Similar Jobs

MatchGroup - Security Compliance Analyst

Seoul, South Korea (Hybrid)

Visa - Sanctions Compliance Analyst

Metro Manila, Philippines (Hybrid)

OKX - Senior Compliance Analyst, Sanctions Advisory

California, United States (On-Site)

OKX - Senior Compliance Analyst, KYC

California, United States (On-Site)

OKX - Compliance Analyst, Market Surveillance

New York, United States (On-Site)

Head Digital Works - Senior Risk and Compliance Analyst

Telangana, India (On-Site)

scaleai - Security Compliance Analyst

California, United States (On-Site)

WebMD - Compliance Analyst

New Jersey, United States (On-Site)

Similar Skill Jobs

DraftKings - Senior AML Associate

United States (Remote)

YallaPlay - Executive & Personal Assistant

Abudhabi, Ae (On-Site)

Avalanche Studios Group - Senior Analytics Engineer

Stockholm County, Sweden (Hybrid)

PlayStation Global - Manager, Software Engineering - Distributed Systems

California, United States (On-Site)

PlayStation Global - Manager, Software Engineering - Distributed Systems

California, United States (On-Site)

Ubisoft - Spécialiste FinOps

Quebec, Canada (On-Site)

Ubisoft - FinOps Specialist

Quebec, Canada (On-Site)

Jobs in Bucharest, Bucharest, Romania

Ubisoft - Engine Programmer [Snowdrop]

Bucharest, Romania (On-Site)

Ubisoft - Render Programmer [Snowdrop]

Bucharest, Romania (On-Site)

PwC - Business Process Specialist (with French)

Bucharest, Romania (On-Site)

PwC - Business Support Specialist with German

Bucharest, Romania (On-Site)

Amber - Senior Financial Analyst

Bucharest, Romania (Hybrid)

EveryMatrix - Senior Accountant

Bucharest, Romania (Hybrid)

sigma software - Middle Java Developer

Bucharest, Romania (Remote)

Nagarro - Senior Staff Engineer, .Net Fullstack

Timiș, Romania (On-Site)

OKX - Growth Manager, OKX Romania

Bucharest, Romania (On-Site)

Software Engineering Jobs

Aristocrat Gaming - Architect

Haryana, India (Hybrid)

Evolution - Office Coordinator

Riga, Latvia (On-Site)

DraftKings - Senior Associate Delivery Manager

United States (Remote)

umusic - Senior BI Engineer

Pennsylvania, United States (On-Site)

Tencent - Senior Staff Researcher

California, United States (On-Site)

Aristocrat Gaming - Technical Lead - Full Stack Development

Uttar Pradesh, India (Hybrid)

Aristocrat Gaming - Front End Developer

Masovian Voivodeship, Poland (Hybrid)

DraftKings - Operations Specialist

Plovdiv Province, Bulgaria (Hybrid)

DraftKings - Senior AML Associate

United States (Remote)

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug