Staff Security Compliance Analyst - IntelliScript (Remote)

What We Do

Milliman IntelliScript is a group of a few hundred experts in fields ranging from actuarial science to information technology to clinical practice. Together, we develop and deploy category-defining, data-driven, software-as-a-service (SaaS) products for a broad spectrum of insurance, health IT and life sciences clients. We are a business unit within Milliman, Inc., a respected consultancy with offices around the world.

Candidates who have their pick of jobs are drawn to IntelliScript’s entrepreneurial and collaborative culture of innovation, excellence, exceptional customer service, balance, and transparency. Every single person has a voice in our company, and we challenge each other to push the outer limits of our full, diverse potential. And, we’ve shown sustained growth that ensures you’ll have room to grow your skillset, responsibilities, and career.

Our team is smart, down-to-earth, and ready to listen to your best ideas. We reward excellence and offer competitive compensation and benefits. Visit our LinkedIn page for a closer look at our company, and learn more about our cultural values here.

Milliman invests in skills training and career development and gives all employees access to a variety of learning and mentoring opportunities. Our growing number of Milliman Employee Resource Groups (ERGs) are employee-led communities that influence policy decisions, develop future leaders, and amplify the voices of their constituents. We encourage our employees to give back to their varied professions, including leadership in professional organizations. Please visit our website to learn more about Milliman’s commitments to our people, diversity and inclusion, social impact, and sustainability.

 What this position entails

As part of Milliman, IntelliScript is a cutting-edge software unit that specializes in risk management solutions.  Combining industry-leading expertise with dedicated customer service, we bring our clients innovative solutions.  The Staff Security Compliance Analyst reports to the Director of Information Security and is responsible for leading annual compliance audits, responding to customer security reviews, and driving information security process improvement initiatives. This individual will have the opportunity to make an immediate impact on the security of our business, help define and build the information security technical architecture, drive innovation, and contribute directly to information security practices, policies, and procedures.

 What you will be doing

• Support IntelliScript’s governance, risk, and compliance
• Lead internal and external audit activities, work directly with clients on security assessments, and lead assigned information security projects
• Facilitate and document corrective action plans and preventative measures in response to findings by internal and external security reviews
• Partner with IT and business units to ensure the implementation of security and governance controls
• Serve as an expert in emerging compliance domains, translating complex regulations into actionable policies and influencing the development of information security frameworks
• Drive organizational compliance maturity and foster a robust enterprise-wide compliance culture
• Guide the organization through major risk events and develop competitive, risk-aware capabilities
• Lead the adoption of advanced cloud-based GRC (Governance, Risk, and Compliance) solutions and machine learning applications for risk and compliance
• Align GRC technology with IT strategy, influence vendor technology direction, and participate in industry advisory boards
• Champion the use of emerging audit technologies, demonstrating business value from audits and driving cultural change to position audit as a strategic business enabler
• Foster a culture of continuous improvement and innovation

 What we need

• 10+ years of relevant professional experience
• Prior experience with annual compliance audits, security reviews, and process improvements
• Experience leading SOC 2 and HITRUST audits
• Knowledge of AWS cloud computing platform and its compliance implications
• Passion for continuous improvement with experience identifying and implementing automation opportunities
• Experience utilizing compliance dashboards and related software/tools
• Ability to effectively partner with peers throughout the business
• Strong work ethic; willing to pitch in wherever needed