Associate Compliance Analyst

At Iron Mountain we know that work, when done well, makes a positive impact for our customers, our employees, and our planet. That’s why we need smart, committed people to join us. Whether you’re looking to start your career or make a change, talk to us and see how you can elevate the power of your work at Iron Mountain.

We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our 225,000 customers around the world to preserve their invaluable artifacts, extract more from their inventory, and protect their data privacy in innovative and socially responsible ways. 

Are you curious about being part of our growth stor​y while evolving your skills in a culture that will welcome your unique contributions? If so, let's start the conversation.

THE OPPORTUNITY:

Title:  Associate Compliance Analyst

Business Group: Compliance

Permanent role

Location:  Spain/ Madrid

100% remote role (open to visiting the Iron Mountain site in Madrid for training purposes, if required)

About us:

Iron Mountain Incorporated (NYSE: IRM) provides information management services that help organizations lower the costs, risks and inefficiencies of managing their physical and digital data. The company's solutions enable customers to protect and better use their information—regardless of its format, location or lifecycle stage—so they can optimize their business and ensure proper recovery, compliance and discovery. Founded in 1951, Iron Mountain manages billions of information assets, including business records, electronic files, medical data, emails and more for organizations around the world. 

Visit www.ironmountain.com for more information.

Your role in our mission:

 
The Associate Compliance Analyst has a key role in supporting, and maintaining the Iron Mountain Data Centers (IMDC) compliance program. This includes interpreting and applying information security / risk frameworks and audit standards, as well as working collaboratively with IMDC teams to successfully implement solutions for identified gaps and risks.

What you will do:

● Support third party, and customer audits by performing audit readiness, gathering audit evidence, recognizing audit risks, and assisting in gap remediation

● Performing administrative support of the overall Compliance program by updating risk register, reporting on control assessments, developing internal documentation, maintaining document repository, preparing gap analysis, updating policy documentation, scheduling working sessions/meetings, and responding to internal and external requests for information

● Identify and evaluate information security and other operational risks, threats and opportunities for improvement discovered through incident management process and other channels

● Collaborate with internal teams in order to ensure risk based controls are evaluated when new systems, processes, or procedures are being deployed

● Perform internal audits, as needed

● Learn, and maintain working knowledge of information security, risk, regulatory and compliance frameworks such as: ISO 27001, SSAE16/18 SOC 1/SOC 2, PCI-DSS, HIPAA, ISO 22301, NIST 800-53, ABS OSPAR, COBIT, ITIL ISO 50001, ISO 14002, BSI KRITIS, ONS ENS, EU EED/EnEfG etc.

What you will bring:

• High-level of resourcefulness and initiative, positive outlook, and a self-starter with an enterprising person attitude; enthusiastic on learning sometimes-complex concepts in a fast paced, global environment with projects that can sometimes occur during non-traditional hours
• Ability and motivation to take ownership of projects and initiatives, hardworking, and determined to execute maximum customer satisfaction
• 2-4 years’ experience in a data center environment preferred,, with a preferred proficient knowledge of physical security systems and processes, or IT/network operations procedures
• Exceptional technical writing, listening, and communicative skills; ability to comprehend and retain large amounts of information, articulate sometimes-abstract ideas and control objectives effectively
• Excellent analytical skills, sound judgment, and ethical decision-making capability
• Ability to work autonomously and have the ability to effectively share ideas and solutions with a diverse group of people and build strong working relationships
• Effective time management and organizational skills with the ability to prioritize and balance competing priorities and meet difficult deadlines, while f