[Hiring] Senior IT Procurement and Compliance Analyst @USAble Life

Role Description

The Senior IT Procurement & Compliance Analyst supports IT budget, procurement, vendor management, compliance, privacy, risk, and governance activities through effective coordination, documentation, analysis, and oversight. This role applies knowledge of procurement practices, technology controls, privacy and data protection principles, and recognized frameworks and standards such as COSO, COBIT, NIST, ISO, SOC, HIPAA, and GLBA to support compliant and effective IT operations, partnering with IT Security, Legal, Privacy, Finance, vendors, auditors, and business teams on audit readiness, third-party risk, policy administration, software licensing documentation, Business Continuity and Disaster Recovery governance, and related process improvement efforts.

• Performs IT procurement activities in compliance with internal policies and external regulations, including:
  • Gathering business requirements
  • Identifying and pre-qualifying potential vendors
  • Developing and distributing RFPs and RFQs
  • Collecting and evaluating proposals, quotes, bids, or other information
  • Recommending vendors best suited to meet the Company’s IT requirements
• Handles tactical purchasing operations such as:
  • Issuing purchase orders
  • Processing and coding invoices
  • Preparing check requests
  • Reconciling purchases
• Supports third-party risk management and IT governance compliance activities by:
  • Conducting vendor due diligence
  • Risk reviews
  • Security and privacy questionnaires
  • Contract compliance tracking
  • Monitoring vendor obligations, regulatory requirements, governance framework alignment, audit activity, remediation efforts, and related risk and compliance metrics
• Coordinates recurring governance and compliance activities, such as:
  • Risk reviews
  • Policy reviews
  • Vendor review meetings
  • Audit status meetings
  • Management reporting
  • Meetings with vendors, auditors, business staff, IT staff, and Legal
• Leads project initiatives, process improvements, audit preparation efforts, and privacy-related activities.
• Coordinates Business Continuity and Disaster Recovery governance by:
  • Maintaining plan documentation in SharePoint
  • Coordinating and participating in annual tabletop exercises
  • Retaining evidence
  • Tracking action items
  • Reporting exercise results
• Assists with IT policy administration, publication, and communication.
• Supports issue and remediation management by:
  • Documenting corrective action plans
  • Assigning ownership
  • Monitoring due dates
  • Validating closure evidence in coordination with responsible teams
• Supports the organization’s privacy program by:
  • Assisting with privacy-related processes
  • Maintaining compliance documentation
  • Assisting with incident tracking and risk assessments
  • Partnering with business teams to help protect sensitive and personal information
• Provides guidance, training, and support to less experienced team members on procurement processes, compliance documentation, vendor records, and recurring governance activities.
• Performs other related duties and responsibilities as assigned.

Qualifications

• Possesses knowledge of COSO, COBIT, NIST, ISO, SOC, HIPAA, GLBA, and other control frameworks.
• Knowledge of privacy and data protection principles.
• Advanced organizational and time management skills with the ability to work independently.
• Ability to build and maintain effective working relationships at all levels.
• Strong Microsoft Office skills and beginner SharePoint skills.

Requirements

• 2 years as a procurement or compliance analyst.
• Experience in purchasing, sourcing, or procurement.
• Experience supporting privacy, compliance, risk, or audit programs.
• Experience with vendor management and contracting.
• Bachelor's Degree in related field or equivalent related experience.
• Or equivalent military experience.

Benefits

• A culture that values employees and celebrates, empowers, and inspires a diverse workforce.
• Outstanding and affordable benefits package.
• PTO provided at date of hire.
• 11 paid holidays.
• 401(k) with up to 6% match; fully vested from day 1.
• Remote opportunities with company-provided equipment.
• Team-oriented, collaborative group of peers.
• Career advancement opportunities.
• Tuition Reimbursement.
• Employee Assistance Program.
• Inclusion Council and Employee Resource Groups.
• Recharge Days and Volunteer Time Off.