Sr Security Analyst - IT Risk & Compliance

Patterson isn't just a place to work, it's a partner that cares about your success.

One of the distinguishing marks of our company is the talented people who embrace the people-first, always advancing, and results-driven culture. Professional growth abounds in this motivating environment. We value the diverse talents and experiences our employees bring to Patterson and believe that they build a stronger and successful organization.

Join Patterson Companies as a Sr. Security Analyst - IT Risk & Compliance and play a pivotal role in safeguarding our organization's information systems and technology assets. You'll drive key programs to identify, manage, and mitigate risks, ensuring the confidentiality, integrity, and availability of critical systems. In this role, you'll lead initiatives to align with regulatory, audit, and compliance obligations while collaborating across Security, IT, and Business teams to advocate for innovative security solutions.

At Patterson, we are dedicated to fostering a respectful and supportive environment, driven by our core values and commitment to growth.

Essential Functions

To perform this job successfully, an employee must be able to perform each essential function satisfactorily, with or without reasonable accommodation. To request reasonable accommodation, notify Human Resources or the manager who oversees the position.

• Collaborate with security and cross-functional teams to evaluate the effectiveness of security and data protection controls, identify opportunities for improvement, and implement solutions aligned with frameworks such as NIST-CSF, HITRUST, and ISO27001/2. Take initiative to identify gaps and recommend actionable improvements while working closely with leadership to ensure alignment with program objectives.

• Develop, implement, and manage IT and security policies, standards, and processes to ensure compliance with regulatory requirements, including PCI, SOX, and HIPAA.

• Coordinate IT disaster recovery controls and exercises, ensuring compliance with organizational objectives, reporting results to key stakeholders and leadership.

• Oversee IT SOX controls and partnership with Internal Audit and Risk & Control teams, providing oversight, training, and awareness to evidence owners and stakeholders for continued compliance.

• Provide expertise and support for internal and external security audits, including responding to customer questionnaires, audit requests, and regulatory reviews.

• Create dashboards and metrics to measure the effectiveness of security controls, identify trends, and communicate progress to leadership and stakeholders.

• Design and maintain security workflows, procedures, and scalable compliance solutions to align with organizational priorities, enhance visibility, and promote the adoption of security best practices.

Additional functions

In addition to the essential functions listed above, the incumbent may perform the following additional functions.

• Assist in configuring and optimizing processes within technology systems to support workflows such as compliance tracking, incident management, risk assessments, and policy management in alignment with organizational objectives for GRC and ITSM/IL tool such as ServiceNow.

• Stay informed on evolving security threats, regulatory changes, and industry trends, applying this knowledge to recommend proactive strategies and improvements to security programs.

• Support organizational security awareness efforts by contributing to the development of materials such as articles, presentations, or training content to promote a culture of security.

• Provide collaborative support to IT and business teams, helping to prioritize risks and implement solutions that enhance security posture and compliance efforts.

Required Qualifications

• Bachelor's Degree with an emphasis in security, technology, or engineering or equivalent work experience

• At least 4 years work experience in information technology, cyber security, or information security

• Excellent communication and collaborator with attention-to-detail.

• Proficiency in regulatory requirements and compliance standards (e.g. SOX, HIPAA, PCI-DSS)

• In-dept knowledge of security risk management and compliance frameworks (e.g. NIST-CSF, COSO, ISO27001/2, CSA, etc.)

Preferred Qualifications

• Familiarity with audit process and frameworks such as SOC2 Type 2 and HITRUST.

• Ability to influence and inspire others to adopt security best practices and policies.

• Security industry certification desired.

This role is open to primarily remote work with the requirement to occasionally come into the corporate office in Mendota Heights, MN for team meetings.

What's In It For You: (~~~)

We provide competitive benefits, unique incentive programs and rewards for our eligible employees:

• Full Medical, Dental, and Vision benefits and an integrated Wellness Program.

• 401(k) Match Retirement Savings Plan.

• Employee Stock Purchase Plan (ESPP).

• Paid Time Off (PTO).

• Holiday Pay & Floating Holidays.

• Volunteer Time Off (VTO).

• Educational Assistance Program (Tuition Reimbursement).

• Full Paid Parental and Adoption Leave.

• LifeWorks (Employee Assistance Program).

• Patterson Perks Program.

EEO Statement

As a people-first company, Patterson promotes a culture that embodies and celebrates diversity and inclusivity. We believe our employees' unique experiences and differences is what strengthens us and drives our success. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status.

We are Patterson. We welcome you.

At Patterson Companies, we live our values everyday. With more than 8,000 employees worldwide, we're responsible for providing dentists, veterinarians, animal producers, and farmers with the support they need to keep us and our animals healthy.

An Equal Opportunity Employer

Patterson Companies, Inc., is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, among other factors.