Security and Compliance Analyst

Topcon Positioning Group is headquartered in Livermore, California, USA (topconpositioning.com).

We design, manufacture and distribute productivity tools for developing a brighter future. Whether cultivating the earth or building upon it, Topcon brings innovation in workflow automation and seamless connectivity of data to construction, geopositioning and agriculture industries focused on developing a sustainable tomorrow.

Topcon is an equal opportunity employer and does not discriminate against any employee or applicant on the basis of race, color, religion, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, genetic information, or other legally protected status.

To  learn more about Topcon career opportunities go to  www.topconcareers.com.

Summary

****** This is a hybrid role 3 days onsite (Tuesday, Wednesday, Thursday) and candidates should be within commute distance to Livermore, CA or Oakland, NJ.******

Topcon Global Information Security team is looking for an experienced Security and Compliance Analyst who will be the lead for the GRC function. This is a hybrid role for Livermore CA.

The Security and Compliance Analyst will be responsible for Control framework compliance oversight and execution of governance activities including auditing. Prioritize and track security and compliance risk issues, guide internal and external stakeholders on mitigation, identify risks that increase loss probability and communicate the posture to the Leadership team. The candidate will act as a subject matter expert for Security Governance, Risk, and Compliance.

Responsibilities

• Measure effectiveness of compliance by conducting routine and focused audits of policy/procedure adherence and ensuring a compliance feedback/prevention process that uses the results of both internal and external audits and investigations to develop, revise and strengthen new and/or existing policies, procedures, and relevant employee training.

• Be responsible for third party risk assessments: assessing controls, processes, and/or systems to identify the threats and vulnerabilities that lead to a risk.

• Assist with investigation, auditing, review, and analysis of general compliance, HIPAA Privacy, and other matters to help ensure compliance with internal policies.

• Assist with the development, update, revision, and/or implementation of compliance policies, procedures, and practices for general compliance and operations.

• Participate in risk assessments of applications, infrastructure, business, and technology vendors against a defined risk framework.

• These assessments will be conducted either through a formalized risk assessment program or through other risk reporting activities.

Qualifications

• Bachelor’s degree.

• Expected 4 - 6 years of experience in cross-functional audit, risk, compliance and/or information security disciplines.

• Subject matter expertise in the areas of various frameworks including but not limited to SOX, PCI, HIPAA, ISO 27001, COBIT, etc.

• Knowledge and experience of HIPAA Privacy and Security Requirements or HITRUST or SOC 1/2 type audits

• Strong understanding of security frameworks and standards such as NIST, ISO27001, HIPAA, and other relevant regulations such as GDPR

• Ability to work independently, in a team, and cross-organizationally to analyze and communicate opportunities for strategic compliance improvements

• Critical thinking, productivity, and strong attention to detail

• Strong listening and written/verbal communication skills

• Experience in project management, along with organizational and planning skills

• Technical experience implementing controls and assessing processes for various applications and technologies (e.g., SAP, PeopleSoft, Oracle, SQL, Azure DevOps, AWS, Windows, Linux, Service Now, CI/CD processes, etc.).

• Occasional travel may be required, not to exceed 10%.

The base pay range 106k-155k is a projected hiring range for a position, level and potential work location(s) listed.  Topcon provides the compensation range that it in good faith believes it might pay and/or offer for this position. This compensation range is based on a full-time schedule.  

Topcon offers a comprehensive benefit package for this position including medical, dental, vision, life insurance, disability insurance, tax saving spending accounts a 401(k) plan with employer match, tuition reimbursement in addition to other perks and benefits.  We also offer time off for our employees to recharge.  O