IT Security and Compliance Analyst

EOE Statement
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.
Category
Information Technology
Description
WHO WE ARE:
Xactus (pronounced • Zac-tus') is the leading verification innovator for the mortgage industry. We have over 6,500 clients ranging from the largest bank and non-bank mortgage originators to credit unions and mortgage brokers. With 12 operation centers across the U.S., Xactus works closely with our clients to digitally integrate a 360• approach to verification across their workflows. As a result, lenders can easily access the technology necessary to meet consumer demands for a modern mortgage experience with industry-leading speed, reliability, and accuracy - while also closing more loans more quickly with greater profitability.
We provide a friendly work environment while also providing many opportunities for you to enhance your skills. We have a top-notch financial leadership team who prioritizes building talent. If you are curious and searching for a change that will be fun and rewarding, please reach out to us! We would love to have you on our team!
WHO YOU ARE:
You are a career-minded, driven individual who is looking for a position that challenges you and supports your professional development.
THE BENEFITS WE OFFER:
A friendly, supportive environment which is highly rated by Xactus employees. Feedback from our employees says: 'The people I work with treat each other with respect,' 'I feel accepted by my coworkers' and 'The person I report to cares about me as a person.'
Health, vision and dental insurances, college tuition benefit, bonus programs, fitness reimbursement and other healthy life-style programs, Maternity and paternity leave, 401k plan, short and long-term disability, life Insurance, accident and critical illness insurance, health savings account, flexible spending account, employee assistance program, legal services, employee discounts and more!
#LI-REMOTE
SUMMARY:
The IT Security & Compliance Analyst works closely with Team Members to maintain and enhance the Security and Compliance of all information systems. This role encompasses a range of responsibilities, including responding to security alerts, auditing security controls, managing security tools and systems, participating in SOC 2 audits, and formulating new security measures. It also involves vulnerability and security assessment remediation planning.
ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Responding to Security Alerts: Promptly and effectively address security alerts to mitigate potential threats.
• Security Controls: Conduct regular audits to ensure compliance with security standards and identify areas for improvement.
• Managing Security Systems and Tools: Oversee and maintain the optimal functioning of security systems and tools.
• SOC 2 Auditing Process Involvement: Actively participate in the SOC 2 auditing process, aiding in preparation, execution, and post-audit activities.
• Developing New Security Controls: Collaborate in creating and implementing new security measures to enhance organizational security.
• Vulnerability Management Remediation Planning: Develop strategies and plans to address identified vulnerabilities in the system.
• Documentation and Reporting: Keep accurate records of security procedures and incidents and report to management.
• Security Assessment Remediation Planning: Plan and execute remediation strategies following security assessments to ensure robust security.

Position Requirements
QUALIFICIATIONS
To perform this job successfully, an individual must be able to perform each essential duty
satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
EDUCATION AND/OR EXPERIENCE

• High School Diploma or equivalent.
• Relevant certifications (CISSP, CISA, CEH) are advantageous.
• Minimum of 3 years in Systems Administration or Engineering roles.

KNOWLEDGE, SKILLS AND COMPENTENCIES
• Technical Expertise: Proficiency in Microsoft Entra ID/Azure Active Directory, Office 365,
Azure (IaaS, Application Proxy, Windows 365), and Vanta Trust Platform, Microsoft Intune.
• Additional Skills: Familiarity with Atlassian Jira Service Management, Confluence, Amazon
AWS, and advanced Microsoft 365 products, previous experience in SOC 2 audits and IT
Compliance.
• ITSM Knowledge: Solid understanding of ITSM processes, including Change Management,
Problem Management, and Incident Management.
• Communication Skills: Excellent verbal and written communication skills.
• Problem-Solving: Strong analytical and problem-solving abilities.
• Team Player: Ability to work effectively in a team and independently.
PHYSICAL DEMANDS:
These physical demands are representative of the physical requirements necessary for a team
member to successfully perform the essential functions of the job. Reasonable accommodations can
be made to enable people with disabilities to perform the described essential functions.
While performing the responsibilities, the team member is required to talk and hear. Tasks require the ability to exert very moderate physical effort in light work, typically involving some combination of stooping, kneeling, crouching, and crawling, and which may involve some lifting, carrying, pushing and/or pulling of objects and materials of moderate weight (12-20 pounds).
Full-Time/Part-Time
Full-Time
Shift
Days
City
Remote
Position
IT Network Administrator
Number of Openings
1
Exempt/Non-Exempt
Non-Exempt
Req Number
INF-24-00039
Open Date
1/26/2024
Location
Phoenix AZ
This position is currently accepting applications.