Sr IT Procurement and Compliance Analyst

The Senior IT Procurement & Compliance Analyst supports IT budget, procurement, vendor management, compliance, privacy, risk, and governance activities through effective coordination, documentation, analysis, and oversight. This role applies knowledge of procurement practices, technology controls, privacy and data protection principles, and recognized frameworks and standards such as COSO, COBIT, NIST, ISO, SOC, HIPAA, and GLBA to support compliant and effective IT operations, partnering with IT Security, Legal, Privacy, Finance, vendors, auditors, and business teams on audit readiness, third-party risk, policy administration, software licensing documentation, Business Continuity and Disaster Recovery governance, and related process improvement efforts.

Essential Duties:

Performs IT procurement activities in compliance with internal policies and external regulations, including gathering business requirements, identifying and pre-qualifying potential vendors, developing and distributing RFPs and RFQs, collecting and evaluating proposals, quotes, bids, or other information, and recommending vendors best suited to meet the Company’s IT requirements

Handles tactical purchasing operations such as issuing purchase orders, processing and coding invoices, preparing check requests, and reconciling purchases

Supports third-party risk management and IT governance compliance activities by conducting vendor due diligence, risk reviews, security and privacy questionnaires, contract compliance tracking, and monitoring vendor obligations, regulatory requirements, governance framework alignment, audit activity, remediation efforts, and related risk and compliance metrics

Coordinates recurring governance and compliance activities, such as risk reviews, policy reviews, vendor review meetings, audit status meetings, management reporting, and meetings with vendors, auditors, business staff, IT staff, and Legal

Leads project initiatives, process improvements, audit preparation efforts, privacy-related activities,

Coordinates Business Continuity and Disaster Recovery governance by maintaining plan documentation in SharePoint, coordinating and participating in annual tabletop exercises, retaining evidence, tracking action items, and reporting exercise results

Assists with IT policy administration, publication, and communication

Supports issue and remediation management by documenting corrective action plans, assigning ownership, monitoring due dates, and validating closure evidence in coordination with responsible teams

Supports the organization’s privacy program by assisting with privacy-related processes, maintaining compliance documentation, assisting with incident tracking and risk assessments, and partnering with business teams to help protect sensitive and personal information

Provides guidance, training, and support to less experienced team members on procurement processes, compliance documentation, vendor records, and recurring governance activities

Performs other related duties and responsibilities as assigned

Required Knowledge, Skills and Abilities:

Possesses knowledge of COSO, COBIT NIST, ISO, SOC, HIPAA, GLBA and other control frameworks

Knowledge of privacy and data protection principles

Advanced organizational and time management skills with the ability to work independently

Ability to build and maintain effective working relationships at all levels

Strong Microsoft Office skills and beginner SharePoint skills

Required Education and Experience:

2 years as a procurement or compliance analyst

Experience in purchasing, sourcing or procurement

Experience supporting privacy, compliance, risk, or audit programs

Experience with vendor management and contracting

Bachelor's Degree in related field or equivalent related experience

Or equivalent military experience

Preferred Education and Experience:

Insurance industry experience

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time

#USAL2