<p>Please read - the annual compensation range for this position is $90 - 93K. Open to fully remote candidates in the Eastern Time Zone or hybrid near the Greater Philadelphia area.</p> <p>Interested in a career that bridges the gap between Supply Chain and Technology?</p> <p>Elemica, an award-winning, digital supply chain company in the SaaS community, is seeking experienced Compliance Analyst. This is an opportunity to join a growing company of talented and committed individuals, unified in the common goal of exceeding our clients expectations.</p> <p>Our Values</p> <p>At Elemica, we believe that embodying our values is essential for all team members. These qualities show up in our interactions with each other, our clients, and our collective community:</p> <ul> <li>Curiosity we delight in the discovery of new challenges and feel compelled to solve them </li><li>Integrity We are relatable and trustworthy; steadfast in our commitment to our colleagues, clients, and partners </li><li>Accountability We show up and deliver measurable, meaningful business value. Consistently. </li><li>Passion We have a shared enthusiasm for transforming our clients supply chain </li></ul> <p>Whats In It For You?</p> <ul> <li>Flexible work locations </li><li>Inclusive parental leave policy that supports all parents and careers </li><li>Health & Voluntary/Pet Insurance Options </li><li>Paid Time Off & Holidays </li><li>Retirement savings and bonus programs </li><li>Quarterly employee engagement events </li><li>Wellness & Mental Health Initiatives </li><li>Generous Employee Referral Program </li><li>Fun work environment </li></ul> <p>Responsibilities & Objectives</p> <p>Reporting to the Vice President, IT, the Compliance Analyst is a subject matter expert (SME) for IT compliance and security policy within the organization. The Compliance Analyst will possess the skills, attitude, communication skills, and hands-on experience necessary for managing and executing various industry standard audits, specifically SOC2 Type II and ISO. The Compliance Analyst will manage various risk assessments and review and maintain required IT Policies and processes. IT is made up of all Corporate IT functions but does work with our customer-facing business units to delivery and collaborate on various projects.</p> <p>What Youll Do</p> <ul> <li>Managing and executing various industry standards audits (SOC2, ISO) </li><li>Ability to work within a GRC application (RiskOptics ZenGRC for example) </li><li>Reviewing and answering compliance and security-related RFPs, questionnaires, and audits for internal and external sources </li><li>Providing the required daily operational support to other business/operations teams at a project level </li><li>Creating, updating, and managing required IT and Security policies and processes </li><li>Working directly with the IT Manager to ensure the Support Team is following proper policies and processes </li><li>Managing Security Training for the organization and ensuring that the employee base achieves certain goals based on OKRs </li><li>Managing and testing Business Continuity Management Plan </li><li>Creating and managing various Risk Assessments (Vendors, IT, etc.) </li><li>Developing and implementing efficient operations management processes and guidelines including customer services support, availability and performance monitoring, and security for aforementioned systems and infrastructure. This should also include careful planning of Change Controls to avoid customer impact while meeting agreed-upon Service Level Agreements (SLAs) </li><li>Implementing and applying the Security Framework to the entire organization </li><li>Developing, managing and updating various IT Metrics within the team </li><li>Managing specific Security functions (Security Awareness training, security adherence to policies, etc.) </li></ul> <p>What Youll Need</p> <ul> <li>Hands-on knowledge and managing a SOC2 Type II Audit to completion </li><li>Hands-on of answering compliance and security-related RFPs, questionnaires and audits </li><li>Knowledge and applying various security frameworks (NIST, ISO, CIS) </li><li>Strong analytical skills and attention to detail </li><li>Highly motivated, resourceful, and willing/capable of inspiring/mentoring others on the team </li><li>Ability to work independently on numerous activities and provide guidance to others on the team </li><li>Ability to work on team projects </li><li>Strong communication skills (English written and verbal) </li><li>Strong critical thinking and problem-solving skills </li><li>Ability to maintain confidentiality in all aspects of the job </li><li>Ability to multi-task and prioritize workload </li><li>Ability to communicate, interact and work effectively and cooperatively with a diverse and geographically dispersed team </li><li>3+ years of related direct hands-on SOC2 Audit work </li><li>Ensuring Operational Excellence within Elemica </li></ul> <p>Education:</p> <p>Bachelor's Degree in technical field or equivalent experience, certifications, or extensive technical training.</p> <p>Who We Are</p> <p>Elemica is a leading provider of Digital Supply Chain Management solutions and the premier multi-enterprise collaboration network for global process manufacturing industries. Its portfolio of SaaS-based, network-powered digitization and visibility solutions automate critical information flows, enable multi-channel data strategies, and improve end-to-end supply chain performance. Elemica solutions connect many of the worlds largest manufacturers to their direct material suppliers, logistics service providers and end customers, helping them realize the promise of, and return on, their investments in supply chain digitization. Today, global leadersincluding Arkema, BASF, Continental, Dow, Goodyear, Michelin, and Shelluse Elemica, driving over $1 trillion in commerce annually.</p> <p>It is the responsibility of all Elemica employees to ensure the security, availability, processing integrity, confidentiality, and privacy of Elemica systems and data and the data of our customers. Using best practices in these areas, all Elemica employees will observe a security first approach to their daily responsibilities. All employees are accountable for securing their work devices, work areas, and communications in the execution of their daily duties.</p>