IT Compliance Analyst, SOC 2

About the team

The IT Regulatory Compliance (ITRC) team ensures our IT environment complies to GLBA, FSSC, PCI-DSS, NACHA, and SOC2 by guiding control implementation and execution across various lines of business. We act as a vital partner to the business with a direct impact to the company's ability to succeed. We are the primary liaison to independent assessors attesting to the state of our control environment. We work closely with the business providing regulatory guidance on new product lines and technologies.

About the role

Zillow is seeking a driven, highly accountable compliance professional to join Zillow Group’s (ZG) ITRC Team. As an IT Compliance Analyst focused on vendor management, you will play a crucial role in ensuring Zillow financial services product lines are safeguarded from external vendors. In the due diligence function, you will support various lines of business in responding to requests from clients regarding the security environment of applications and services. If you want to make meaningful contributions to a fast-growing enterprise, we encourage you to apply!

You will get to:

• Manage intake for due diligence requests from Zillow clients
• Respond to technical assessments in a timely manner
• Ensure compliance documentation to support due diligence requests is accurate, complete and up to date
• Identify opportunities for improvement within the due diligence process
• Maintain detailed reporting on due diligence requests including number, frequency, size, etc.
• Conduct security-based risk assessments over third party vendors used to support financial services lines of business
• Assess third party vendors against FFIEC and NIST requirements
• Risk rate the vendors based on the outcome of the review
• Perform annual cybersecurity reviews on high risk or critical vendors and update appropriate stakeholders of any issues
• Maintain vendor controls in GRC tooling and update control details as necessary
• Partner with the Vendor Management team and Information Security to collaborate on vendor review results
• Efficiently manage and prioritize multiple tasks simultaneously, ensuring timely completion and delivery while maintaining a high level of quality and attention to detail

This role has been categorized as a Remote position. “Remote” employees do not have a permanent corporate office workplace and, instead, work from a physical location of their choice which must be identified to the Company. Employees may live in any of the 50 US States, with limited exceptions. In certain cases, an employee in a remote-designated job may need to live in a specific region or time zone to support customers or clients as part of their role.

In California, Colorado, Connecticut, Hawaii, Nevada, New York and Washington the standard base pay range for this role is $39.60 - $63.20 Hourly. This base pay range is specific to California, Colorado, Connecticut, Hawaii, Nevada, New York and Washington and may not be applicable to other locations.

In addition to a competitive base salary this position is also eligible for equity awards based on factors such as experience, performance and location. Actual amounts will vary depending on experience, performance and location.

Who you are

• Bachelor’s Degree in Management Information Systems or equivalent professional experience
• Minimum 2 years of experience in compliance, audit, or a similar field
• Familiarity of financial sector information security standards and frameworks such as NIST CSF, NIST 800-53, FFIEC, SOC, GLBA, and FSSC
• Familiarity with AWS cloud security practices and the shared responsibility model
• Ability to perform IT risk assessments with little supervision
• Strong interpersonal skills including experience building positive relationships with partners
• Outstanding communication skills, both written and verbal
• Preferred certifications include Security +, CRISC, CISA, CISSP, or CIPP

Get to know us

Zillow is reimagining real estate to make home a reality for more and more people.

As the most-visited real estate website in the United States, Zillow® and its affiliates help movers find and win their home through digital solutions, first class partners, and easier buying, selling, financing and renting experiences. Millions of people visit Zillow Group sites every month to start their home search, and now they can rely on Zillow to help make it easier to move. The work we do helps people get home and no matter what job you're in, you will play a critical role in making home a reality for more and more people.

Our efforts to streamline the real estate transaction are supported by a deep-rooted culture of innovation, our passion to redefine the employee experie