Senior Compliance Specialist Job

Posting Job Title:Senior Compliance Specialist
Requisition #: 159136BR
Posting Location: Andover, MA, US
Area of Interest:Information Technology Services
Position Type: Full Time

Posting Job Description

TWC Business Class is driven by industry regulations and state and federal laws to perform a host of audits, assessments and reviews. The Security and Compliance Analyst will be required to support a variety of regulatory compliance requirements such as Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI), Health Insurance Portability and Accountability Act (HIPAA), European Union/Safe Harbor, Federal Information Security Management Act (FISMA), National Institute of Standards and Technology (NIST), etc., as well as knowledge of industry compliance programs such as ISO 27001 and SSAE16. This position will provide support for both the company ' s and Business Class customer ' s Compliance Programs as part of an ongoing compliance program.
KEY RESPONSIBILITIES:


- The Senior Compliance Specialist will need to have strong communication skills, as the position will be required to actively communicate with a wide range of TWC personnel in various roles, as well as interface directly with TWC Business Class customers.

- Proven ability to identify and track audit program requirements, assign the appropriate risk rating and prioritization for remediation based on potential impact to TWC Business Class customer IT environments.

- Provide guidance on more efficient and effective methods for executing controls in a multi-tenant IT environment.

- Ability to create and execute control testing plans to monitor that controls continue to operate effectively.

- Maintain awareness of industry and broader information security risks and how the changing risk profile could impact TWC and/or Business Class customers.

- Research technical and relevant solutions to meet security and compliance requirements for varied operating environments.

- A strong overall IT knowledge is required. A solid understanding of OS ' s, IP networks, database and application functionality is critical. The Senior Compliance Specialist should be able to participate in technical discussions with IT personnel and to be able to explain TWC technical environments clearly and correctly to audit personnel so that they understand the system functionality being analyzed.

- Regularly publish and communicate status of compliance program and progress

- Proactively adjust reporting based on internal or external security risks, management or customer requirements, or improvements to drive remediation and awareness.

- Drive timely remediation of compliance observations through reporting, verbal presentations or other creative methods.

- Work with Sales and Solution teams to identify Business Class customer compliance programs.

- Continuously strive for process improvement and the enhancement of Compliance Management processes including the reduction of associated costs and time required.

REQUIRED QUALIFICATIONS/ YEARS OF MINIMUM RELEVANT EXPERIENCE:

-

Strong written and oral presentation skills.

- Strong knowledge of compliance management processes, process flow, controls identification and testing, and tools associated with remediation management such as Alert Logic, Tenable, Qualys, Archer, Tripwire, etc.

- Strong understanding of Information technology including IP network security as well as server, DB and application security methodology and practices.

- Strong background in regulatory compliance framework-industry compliance programs such as ISO 27001 and SSAE-16.

- Strong knowledge of a multi-tenant environment and security management applications and supporting infrastructure.

- Demonstrated experience in MS Office tools to develop and publish reporting and trend analysis.
PREFERRED QUALIFICATIONS/ YEARS OF MINIMUM RELEVANT EXPERIENCE:

-

Certification of CISSP and/or CISM preferred.

- Experience with PCI, NIST 800-53, HIPAA, SOX is preferred.

- Knowledge of one of the following tools and technology:
1)

Security Reference Architecture, IDS, FW, Log Monitoring
2)

Archer 4.0 / 5.0 - Able to develop reporting to support compliance and security initiatives of both TWC and customer clients.
3)

Tenable/Nessus Scanning Tools - able to administer the scanning tool to support complete and focused scanning activities and reporting.
4)

Qualys Scanning Tools - able to administer the scanning tool to support complete and focused scanning activities and reporting.
5)

Alert Logic - able to administer the scanning tool to support complete and focused scanning activities and reporting.
6)

Tripwire - ability to interpret compliance baseline reports and drive remediation activity.

REQUIRED EDUCATION/ AND OR CERTIFICATIONS:
Bachelor ' s degree (B. A.) from four-year college or university; or equivalent training, education and experience.
CBTWC 8/1/14 , TWC:LAD



FCC Unit_TWC: NAVIS
Controlling Establishment ID: 00800 - Andover 400 Minuteman Rd

More on TWC:
Time Warner Cable reaffirms its commitment to providing equal opportunities for employment and advancement to qualified employees and applicants. Individuals will be considered for positions for which they meet the minimum qualifications and are able to perform without regard to race, color, gender, age, religion, disability, national origin, veteran status, sexual orientation, gender identity, current unemployment status, or any other basis protected by federal, state or local laws.

Time Warner Cable is an Equal Opportunity Employer - Minority/Female/Disability/Veteran/Current Unemployment Status