Lockton is seeking a motivated Security Compliance Analyst I to support the organization’s security compliance and client-assurance activities. This role will coordinate audit requests, collect and validate evidence, help control owners understand their responsibilities, support auditor interactions, and contribute to accurate responses about Lockton’s security program. The position is well suited for a developing compliance professional who is organized, curious, and comfortable working across technical and business teams.

Key Responsibilities
•    Support audit and assessment cycles by maintaining request lists, coordinating evidence collection, tracking deadlines, scheduling walkthroughs, documenting questions, and following up on open items.
•    Work with control owners to collect complete, accurate, and timely evidence; perform an initial quality review before materials are submitted for further review or provided to auditors.
•    Help educate control owners on control intent, evidence expectations, recurring deadlines, and documentation standards.
•    Support interactions with internal and external auditors, including meeting coordination, request clarification, walkthrough preparation, and tracking follow-up questions and commitments.
•    Maintain compliance documentation such as control narratives, evidence inventories, procedures, testing records, issue logs, and remediation trackers.
•    Identify missing evidence, documentation inconsistencies, and potential control gaps; escalate concerns and assist with remediation follow-up.
•    Contribute to the development, review, and maintenance of cybersecurity policies, standards, and procedures to support security, compliance, and business requirements.
•    Prepare and maintain draft responses to client security questionnaires and due-diligence requests using approved information about Lockton’s security program and controls.
•    Assist with client and prospective-client security discussions by preparing materials, documenting questions, and coordinating responses with subject-matter experts.
•    Maintain reusable answer content and supporting documentation for client assurance activities.
•    Partner with Information Security, Information Technology, Legal, Privacy, Risk, and business stakeholders on compliance-related requests and projects.
•    Stay current on cybersecurity compliance concepts, audit practices, and relevant industry developments.

•    1-3 years of experience in cybersecurity compliance, information security governance, technology risk, IT audit, client assurance, or a related field.
•    Experience supporting audits, assessments, control testing, evidence collection, or remediation tracking.
•    Experience coordinating with technical or business stakeholders to obtain documentation and meet deadlines.
•    Ability to understand control requirements and communicate evidence expectations clearly to control owners.
•    Experience contributing to client security questionnaires, due-diligence requests, or similar written responses.
•    Foundational knowledge of security controls, risk concepts, audit evidence, and cybersecurity compliance frameworks or assurance programs.
•    Strong written and verbal communication skills, attention to detail, and the ability to self-direct, prioritize tasks independently, and organize multiple assignments and deadlines.
•    Sound judgment and discretion when handling confidential, sensitive, or restricted information.
•    Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent practical experience.

Preferred Qualifications
•    Familiarity with reviewing cybersecurity, privacy, audit, or compliance provisions in contracts and customer agreements.
•    Exposure to SOC 2, HITRUST, ISO 27001, NYDFS, or comparable security compliance and assurance activities.
•    Experience with governance, risk, and compliance platforms, evidence repositories, questionnaire-response tools, or workflow systems.
•    Experience in a regulated, professional-services, financial-services, insurance, or similarly complex environment.

Success in This Role
Success will be demonstrated through reliable audit support, accurate and timely evidence, effective follow-up with control owners, clear documentation, consistent client-questionnaire responses, and continued growth in security compliance knowledge and judgment.

#LI-JM