{"id":3408792,"url":"https://alion.io/job/harris-computer-security-compliance-specialist","title":"Security Compliance Specialist","company":{"id":2223,"name":"Harris Computer","domain":"harriscomputer.com","url":"https://alion.io/company/harris-computer","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":36,"ghost_share":0,"stale_share":0.861,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":80000,"max":90000,"currency":"USD","period":"year","gross":null,"usd_annual":90000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-28T17:02:05Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-02T15:56:57Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"WHAT YOU WILL DO\nSecurity Guidance for Certification Readiness\nAdvises business units on security requirements applicable to their certification, attestation, assessment, or regulatory scope (e.g., SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and applicable Nacha requirements)\nReviews security documentation, policies, and procedures for completeness and alignment with certification requirements and other applicable security and compliance obligations\nIdentifies security-related gaps that may need remediation prior to an external audit\nAdvises on proactive evidence collection, since evidence requests often begin broad (e.g., lists of computers or projects) before narrowing to specific items (e.g., a specific workstation or project); encourages early and continuous evidence gathering rather than waiting for detailed requests\nDocumentation Standards Guidance\nAdvises businesses that meetings related to internal audits, business continuity, disaster recovery, and external penetration tests should be well documented with agendas and minutes to support evidence collection during audits and assessments\nReviews documentation practices to confirm they will hold up to auditor scrutiny from a security perspective\nShared Services & Third-Party Scoping\nProvides security-focused input on how shared services and corporate/administrative support functions (such as centralized IT, HR, finance, or legal services provided by a parent or corporate entity) should be classified within the audit scope-specifically whether the relationship should be treated as inclusive or carve-out\nAdvises on scenarios where a business unit relies on a shared services provider for security-relevant reporting it cannot generate independently (e.g., workstation patching reports or password settings), which typically indicates an inclusive scoping approach rather than carve-out\nRecommends involving the shared services provider (e.g., a Corporate IT function) as early as possible in the audit, assessment, or certification process, since certain evidence requests-such as workstation lists, vulnerability scan reports, or patching audit logs-may require lead time to fulfill\nSecurity Control Recommendations\nRecommends security controls and improvements needed to satisfy the requirements of the applicable framework\nProvides guidance on password settings, patching cadence, and other technical security configurations commonly requested as audit evidence\nReviews penetration test scope and results from a security standpoint to determine whether they provide appropriate evidence for applicable audit, assessment, or certification requirements\nAudit Coordination Support\nWorks in coordination with the business unit's internal audit team and external auditors throughout the audit, assessment, or certification process\nParticipates in audit planning discussions to ensure security evidence and controls are appropriately represented\nSupports communication between the business unit and any shared services or corporate support functions needed to fulfill audit evidence requests\nAssists in tracking security-related audit findings through to remediation and closure\nCollaborates with corporate support functions (IT, HR, Finance, Legal) when their services fall within the audit scope, ensuring timely delivery of required reports and documentation\nWHAT WILL MAKE YOU STAND OUT\nAttention to Detail\nAnalytical Thinking\nCommunication Proficiency\nAdvisory/Consultative Skills\nCollaboration\nProject Coordination\nWHAT ARE WE LOOKING FOR\nSecurity & Compliance Experience\nThree or more years of relevant experience assessing security and compliance requirements, including hands-on evaluation of technical security controls and supporting audits, assessments, or certification-readiness activities.\nExperience advising on security controls required for SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and Nacha requirements\nFamiliarity with common security evidence requirements referenced during audits (e.g., patching reports, password settings, penetration test results)\nUnderstanding of inclusive vs. carve-out scoping considerations for shared services or third-party relationships from a security perspective\nExperience coordinating with internal audit teams, external auditors, and corporate support functions during audit, assessment, and certification processes\nDocumentation & Standards Knowledge\nUnderstanding of documentation standards expected for internal audits, business continuity, disaster recovery, and penetration testing activities\nExperience evaluating the design, implementation, and operating effectiveness of administrative and technical security controls and clearly documenting identified gaps\nRequired Training and Education\nBachelor's degree in Information Security, Computer Science, or related field\nEquivalent work experience may substitute for degree requirement\nPreferred Certifications\nCISSP (Certified Information Systems Security Professional)\nISO 27001 Lead Implementer\nCISA (Certified Information Systems Auditor)\nPCIP (Payment Card Industry Professional) and willingness and ability to obtain PCI ISA (Internal Security Assessor) after hire if PCI DSS responsibilities are assigned\nKey Deliverables\nSecurity gap analysis reports\nSecurity control recommendations for audit readiness\nGuidance documentation on evidence types typically requested by auditors\nSecurity-focused scoping recommendations for shared services relationships\nCoordination notes/reports supporting audit evidence collection timelines\nCOMPENSATION DETAILS\nThe potential salary range for this role is $80,000 to $90,000 per year, with eligibility for bonus or merit program. Final compensation will be based on experience, skills, market conditions, and internal equity. We offer a competitive Total Rewards program including health benefits, RRSP matching, stock option, and career development opportunities.","description_format":"text","description_chars":5888,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Billing & Subscription Management","EHR & Clinical Software"],"lifecycle":[{"event":"open","at":"2026-10-28T17:02:05Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":31,"reasons":["conf:5","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":90000,"is_top_pay":false},"html_url":"https://alion.io/job/harris-computer-security-compliance-specialist","json_url":"https://alion.io/job/harris-computer-security-compliance-specialist.json","meta":{"generated_at":"2026-11-02T17:03:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23744,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2223},"rest":"https://alion.io/mcp/rest/get_company?id=2223"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fharris-computer-security-compliance-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fharris-computer-security-compliance-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fharris-computer-security-compliance-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/harris-computer-security-compliance-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fharris-computer-security-compliance-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3408792}},{"tool":"search_jobs","arguments":{"company":"harriscomputer.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3408792},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}