Senior Analyst: Audit & Compliance

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We can't do it without you.

Jack Henry is seeking an experienced Senior Audit & Compliance Analyst to join our Complementary Solutions team. Under minimal supervision, work large complex tasks with occasional assistance from manager. Possesses communication skills required to complete tasks, leadership skills, and mastery of Analyst and Advanced Analyst skills. The ideal candidate is knowledgeable about information systems and security with a hunger to learn the intricacies of audit and compliance.

The ideal candidate must be able to travel up to 5% for meetings or conferences.

This position will be based remotely within the United States.

What you'll be responsible for:

• Audit Facilitation:
  1. Lead and manage compliance and audit activities, serving as the central point of contact (CPC) for internal and external audits, and directly coordinating with system owners across Complementary Solutions organization.
  2. Manage multiple SOC 1 and SOC 2 audits simultaneously to ensure timely report delivery in a complex environment.
  3. Conduct thorough reviews and validation of control implementations, ensuring that all supporting documentation is meticulously prepared and audit-ready at all times.
• Compliance Oversight:
  1. Evaluate changes to the Business Unit environment and Jack Henry policies to determine their effect on BU processes and controls.
  2. Obtain and maintain in-depth knowledge of Complementary Solutions systems, processes, underlying technologies, and controls relevant to SOC 1 and SOC 2 reports.
  3. Stay comprehensively up to date on evolving regulatory changes and provide proactive, expert guidance to department management and staff on external requirements, audit concerns, and internal control best practices.
  4. Drive timely and complete responses to audit-related requests, actively coordinating with and assisting control owners in responding to audit evidence and follow-up requests.
  5. Systematically follow up on internal and external findings from security-related reviews and other third-party assessments, ensuring accountability and resolution.
• Remediation Support
  1. Proactively monitor and track Complementary Solutions Threat & Vulnerability and Patch management dashboards. Ensure that BUs remediation plans are clearly noted, actively followed, progress is effectively communicated, and resolved in a timely manner.
• Standardization of Procedures
  1. Consolidate and standardize business unit procedures into a consistent, division-wide document that is also aligned with Jack Henry policies.
• Enterprise Initiatives
  1. Participate in governance, risk, compliance, and security initiatives for Jack Henry as assigned.
• May perform other duties as assigned.

What you'll need to have:

• Bachelor's degree in Business, Technology, or Information Security.
• Minimum of 6 years experience in Information Security.
• Minimum of 3 years of experience coordinating IT compliance and audit activities and supporting compliance requirements for SOC audits.
• Familiarity with security and controls standards, frameworks, and best practices (e.g., SOC, NIST, COBIT, COSO, ISO 27001).
• Organizational and communication skills.
• Strong analytical and problem-solving abilities.
• Strong attention to detail.
• Must be able to work in Eastern time zone.

What would be nice for you to have:

• Has a wide range of experience and able to resolve complex issues. Works on complex and diverse projects. Analysis requires an in-depth evaluation of variable factors. Exercises good judgment in selecting methods, techniques and evaluation criteria for obtaining solutions.
• Experience with cloud platforms.
• Project management skills.
• Able to define problems, collect data, establish facts, and draw valid conclusions.
• Able to meet aggressive deadlines.
• Certification such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC or equivalent IT audit and controls related certification.

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways.

Why Jack Henry?

At Jack Henry, we pride ourselves through our motto of, "Do the right thing, do whatever it takes, and have fun." We recognize the value of our associates and believe much of our company's strength and success depends on their well-being.

We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.