Cybersecurity Compliance Analyst

Position Summary

As the Cybersecurity Compliance Analyst you will support and strengthen the organizations cybersecurity governance risk and compliance initiatives. You will play a critical part in representing STERIS Digital Workflow Soltuions systems infrastructure cloud environments client data and operational integrity while supporting compliance with frameworks such as NIST SOC 2 FedRAMP related security standards and ensuring systems meet customer security and regulatory requirements.

You will collaborate closely with the Legal Compliance Leadership and all Development teams to monitor security posture audit readiness manage risk-related activities coordinate compliance initiatives and respond to Customer technical & security questionnaires. The position requires a blend of technical understanding analytical thinking documentation management and communication skills.

*This is a fully remote role with preference for qualified candidates living in Eastern and Central time zones.

What Youll Do as a Cybersecurity Compliance Analyst

• Maintain strong operational alignment with security and compliance frameworks including NIST SOC 2 and FedRAMP.
• Ensure audit preparation activities evidence collection and compliance reporting are completed accurately and on schedule.
• Improve and maintain vendor risk management and third-party security review processes.
• Maintain accurate security documentation procedures questionnaires and internal records.
• Support the companys long-term cybersecurity maturity goals and compliance initiatives.
• Collect organize validate and maintain evidence required for audits assessments and security reviews.

The Experience Skills and Abilities Needed

Required:

• Bachelors degree in: Cybersecurity Information Technology Computer Science Or related field
• 2 years experience in the following:
  • Networking basics (TCP/IP DNS firewalls)
  • Operating systems (Windows & Linux)
  • Basic scripting (Python PowerShell or Bash)
  • Threats & vulnerabilities
  • Risk management principles
  • Identity and access management (IAM)
  • Encryption basics
  • Experience with SIEM tools (e.g. Splunk QRadar) Antivirus/endpoint protection Vulnerability scanners (e.g. Nessus)

Preferred:

• Hands-on labs (TryHackMe Hack The Box)
• Knowledge of cloud security (AWS/Azure basics)
• Familiarity with compliance frameworks (NIST ISO 27001)
• CompTIA Security preferred

What STERIS Offers

We value our employees and are committed to providing a comprehensive benefits package that supports your health well-being and financial future.

Here is a brief overview of what we offer:

Market Competitive Pay
Extensive Paid Time Off and (9) added Holidays
Excellent Healthcare Dental and Vision Benefits
Long/Short Term Disability Coverage
401(k) with a company match
Maternity and Paternity Leave
Additional add-on benefits/discounts for programs such as Pet Insurance
Tuition Reimbursement and continued education programs
Excellent opportunities for advancement in a stable long-term career