{"id":1453922,"url":"https://alion.io/job/holmes-murphy-information-security-compliance-analyst","title":"Information Security Compliance Analyst","company":{"id":1897327,"name":"Holmes Murphy","domain":"holmesmurphy.com","url":"https://alion.io/company/holmesmurphy","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Des Moines, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":146000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":374},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-21T00:00:00Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-12T18:58:30Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Job Description:\nWe are looking to add an Information Security Compliance Analyst II to join our Information Security team in West Des Moines, Iowa. Offering a forward-thinking, innovative, and vibrant company culture, along with the opportunity to share your unique potential, there really is no place like Holmes!\nEssential Responsibilities:\nThe purpose of this position is to support the information security program, including initiatives related to strategy, policies, standards, risk management, awareness, and training. This role will also support the enhancement of the Enterprise’s overall governance program.\nEssential Responsibilities:\nConduct comprehensive risk assessments and provide detailed reports on findings and required mitigations.\nLead the development and maintenance of policies, ensuring they address regulatory requirements.\nOversee implementation of risk mitigation controls, risk management, and conduct follow-up audits.\nManage vendor risk assessments, working with third parties to address any gaps.\nReview contractual agreements against compliance standards and in alignment with HMA contractual requirements\nAdditional Responsibilities:\nDevelop and present compliance metrics and reports to senior management and auditors.\nMentor junior analysts and oversee documentation quality.\nTake the lead on special compliance projects, ensuring alignment with strategic goals.\nAssist with the annual SOC2 audit and other audits or assessments as appropriate.\nKnowledge, Skills and Abilities:\nStrong understanding and application of privacy policies, compliance standards and regulations such as NIST, HIPAA, NYDFS or GLBA.\nSolid knowledge of GRC tools such as Apptega, Archer, etc.\nBroad technical knowledge of network, cloud, and application security.\nAbility to conduct internal and external risk assessments and identify various types of risks, such as operational, cybersecurity, regulatory, and reputational risks, and recognize the implications of these risks on the organization.\nProficient with mapping and analyzing workflows to identify points of inefficiency, risk, or non-compliance.\nStrong understanding of SDLC and experience in compliance integration.\nAbility to analyze complex issues and implement effective solutions.\nExperience using automation tools within the work environment.\nAbility and willingness to consistently participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.\nAbility to be available for work on a daily basis and extended hours as necessary.\nAbility and willingness to consistently participate in internal and external educational opportunities to enhance knowledge of current insurance topics or relevant system improvements.\nAbility and willingness to pursue relevant designations and/or continuing education, as appropriate.\nAbility to apply common sense understanding to carry out instructions furnished in written, oral or diagram form. Ability to deal with problems involving several concrete variables in standardized situations.\nAbility to exert up to 10 pounds of force occasionally, and/or negligible amount of force frequently or constantly to lift, carry, push, or pull objects.\nMust be knowledgeable of and comply with HMA's Client Privacy Policy, HIPAA regulations and E&O procedures and policies.\nQualifications:\nEducation: Associate’s or Bachelor’s degree in cybersecurity, technology, information systems, or related area or an equivalent combination of education, training, and experience.\nExperience: 3-5 years of relevant experience in Information Security, compliance, governance, or other security-related fields. Relevant certifications preferred.\nAbility and willingness to pursue relevant designations and/or continuing education, as appropriate.\nCore Competencies\nTrust: Build trust through honest and caring actions and consistently do the right thing.\nCommunication: Seek understanding to convey messages and information to others in a caring and constructive manner.\n Client Focus: Establish meaningful relationships with clients (internal and external) by supporting their unique potential and delivering an impactful experience.\nTeamwork: Contributes to the success of the organization by effectively influencing others and uplifting their experiences and unique strengths.\nTechnical Competencies\nBusiness & Technology Knowledge: Invests in the development of technical knowledge, understands business needs to make informed decisions and deliver technology solutions, including effective related processes and procedures.\n Problem Solving: Ability to efficiently identify problem(s), leverage resources to determine root cause(s) and propose and implement solutions or make improvements\nHere’s a little bit about us:\nIn addition to being great at what you do, we place a high emphasis on building a best-in-class culture. We do this through empowering employees to build trust through honest and caring actions, ensuring clear and constructive communication, establishing meaningful client relationships that support their unique potential, and contributing to the organization's success by effectively influencing and uplifting team members.\nBenefits: In addition to core benefits like health, dental and vision, also enjoy benefits such as:\nPaid Parental Leave and supportive New Parent Benefits - We know being a working parent is hard, and we want to support our employees in this journey!\nCompany paid continuing Education & Tuition Reimbursement - We support those who want to develop and grow.\n401k Profit Sharing - Each year, Holmes Murphy makes a lump sum contribution to every full-time employee’s 401k. This means, even if you’re not in a position to set money aside for the future at any point in time, Holmes Murphy will do it on your behalf! We are forward-thinking and want to be sure your future is cared for.\nGenerous time off practices in addition to paid holidays - Yes, we actually encourage employees to use their time off, and they do. After all, you can’t be at your best for our clients if you’re not at your best for yourself first.\nSupportive of community efforts with paid Volunteer time off and employee matching gifts to charities that are important to you - Through our Holmes Murphy Foundation, we offer several vehicles where you can make an impact and care for those around you.\nInclusion & Belonging Programs - Holmes Murphy is committed to celebrating every employee’s unique potential. Through inclusion and belonging initiatives, titled Uniquely United, not only do we offer employees a paid Diversity Day time-off option, but we also have a Uniquely United Committee, Employee Resource Groups, and development programs to advance our culture of belonging. We encourage employees to engage in ways that are meaningful to them to enhance their overall experience! \nConsistent merit increase and promotion opportunities - Employees are reviewed annually for merit increases and promotion opportunities because we believe growth is important - not only with your financial wellbeing, but also your career wellbeing.\nDiscretionary bonus opportunity - Yes, there is an annual opportunity to make more money. Who doesn’t love that?!\nHolmes Murphy & Associates is an Equal Opportunity Employer.","description_format":"text","description_chars":7303,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Financial Services","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-09-29T08:55:30Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.705,"p_room":0.75,"age_days":22,"expected_fill_days":23,"reasons":["conf:10","velocity","win:late"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/holmes-murphy-information-security-compliance-analyst","json_url":"https://alion.io/job/holmes-murphy-information-security-compliance-analyst.json","meta":{"generated_at":"2026-10-13T09:35:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14555,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1897327},"rest":"https://alion.io/mcp/rest/get_company?id=1897327"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fholmes-murphy-information-security-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fholmes-murphy-information-security-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fholmes-murphy-information-security-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/holmes-murphy-information-security-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fholmes-murphy-information-security-compliance-analyst"}]}