Security Compliance Analyst I

Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities. This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program. The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.

Key Responsibilities
• Support audit and assessment cycles by maintaining request lists, coordinating evidence collection, tracking deadlines, scheduling walkthroughs, documenting questions, and following up on open items.
• Work with control owners to collect complete, accurate, and timely evidence; perform an initial quality review before materials are submitted for further review or provided to auditors.
• Help educate control owners on control intent, evidence expectations, recurring deadlines, and documentation standards.
• Support interactions with internal and external auditors, including meeting coordination, request clarification, walkthrough preparation, and tracking follow-up questions and commitments.
• Maintain compliance documentation such as control narratives, evidence inventories, procedures, testing records, issue logs, and remediation trackers.
• Identify missing evidence, documentation inconsistencies, and potential control gaps; escalate concerns and assist with remediation follow-up.
• Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
• Prepare and maintain draft responses to client security questionnaires and due-diligence requests using approved information about Lockton’s security program and controls.
• Assist with client and prospective-client security discussions by preparing materials, documenting questions, and coordinating responses with subject-matter experts.
• Maintain reusable answer content and supporting documentation for client assurance activities.
• Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders on compliance-related requests and projects.
• Stay current on cybersecurity compliance concepts, audit practices, and relevant industry developments.