LandOffer
Security Analyst II
Spotted 1h ago
Job details
- Level
- Mid level
- Experience
- 3+ years
- Education
- Bachelor's degree
- Posted
- Oct 19, 2026
- Last confirmed open
- Oct 20, 2026
Job description
About this role
Your Responsibilities
- Lockton is seeking an experienced Security Compliance Analyst II to help operate and mature the organization’s security compliance program.
- This role will manage recurring audit and assessment activities, coordinate evidence and responses, educate control owners, and serve as a knowledgeable liaison with auditors, clients, and internal stakeholders.
- The successful candidate will combine practical audit-cycle experience with strong communication, organization, and business judgment.
Key Responsibilities
- Manage end-to-end audit and assessment cycles, including planning, scoping, request tracking, evidence coordination, status reporting, walkthroughs, issue follow-up, and closure activities.
- Coordinate with control owners to collect complete, accurate, and timely evidence; evaluate submissions for quality and alignment with control requirements before providing them to auditors or assessors.
- Educate and coach control owners on control intent, evidence expectations, testing approaches, recurring deadlines, and sustainable compliance practices.
- Act as a primary day-to-day contact for internal and external auditors by coordinating meetings, clarifying requests, facilitating walkthroughs, and tracking open questions and commitments.
- Support compliance initiatives and the continued evolution of controls toward repeatable, measurable, and increasingly continuous monitoring practices.
- Maintain compliance documentation, including control narratives, evidence inventories, testing records, remediation plans, procedures, and management-ready status reporting.
- Identify control gaps, evidence weaknesses, and process inefficiencies; partner with control owners and technology teams to define practical remediation actions and monitor progress.
- Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
- Prepare responses to client security questionnaires and other client inquiries regarding Lockton’s security program, controls, assurance activities, and risk-management practices.
- Participate in client and prospective-client discussions, presenting security and compliance information clearly while appropriately managing sensitive or restricted information.
- Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders to support projects and communicate compliance impacts and obligations.
- Contribute to the maintenance and improvement of approved response content, supporting documentation, and reusable materials for client assurance activities.
- Review security and compliance language in contracts, addenda, and customer requirements when needed; identify concerns and coordinate feedback with Legal and relevant subject-matter experts.
- Stay current on relevant cybersecurity compliance expectations, audit practices, and industry developments.
Qualifications
- 3-5 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, or a closely related field.
- Demonstrated experience managing or coordinating audit cycles from planning through final response and remediation tracking.
- Experience working directly with internal or external auditors, including evidence requests, walkthroughs, follow-up questions, and issue resolution.
- Experience translating control requirements into clear expectations for technical and business control owners.
- Experience preparing responses to client security questionnaires, due-diligence requests, or customer assurance inquiries.
- Working knowledge of security controls, risk concepts, audit evidence, and common cybersecurity compliance frameworks or assurance programs.
- Excellent written and verbal communication skills, including the ability to explain security and compliance topics to technical, business, client, and audit audiences.
- Strong organizational and project-management skills, with the ability to manage multiple workstreams, deadlines, dependencies, and stakeholders.
- Ability to self-direct, prioritize tasks independently, and deliver high-quality results under tight deadlines.
- Sound judgment and discretion when handling confidential, sensitive, or restricted information.
- Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent practical experience.
Preferred Qualifications
- Experience reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.
- Experience supporting SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.
- Experience with governance, risk, and compliance platforms; evidence repositories; questionnaire-response tools; or workflow and ticketing systems.
- Professional certification such as CISA, CRISC, CISSP, CISM, CCSK, or a comparable audit, risk, or security credential.
- Experience in a client-facing role within a regulated, professional-services, financial-services, insurance, or similarly complex environment.
- Success in This Role Success will be demonstrated through disciplined audit execution, high-quality and timely evidence, informed and accountable control owners, clear auditor and client communication, effective issue follow-through, and continuous improvement of Lockton’s compliance and client-assurance processes.
Interested in this role?Continue on LinkedIn to apply.
Apply on LinkedIn