Requisition #: 20765Functional Area: Risk & Compliance; Audit/Risk/ComplianceEmployment Type: Full-TimeWork Options: In Office / Partial Remote from Neenah/Appleton/Oshkosh area #LI-HybridWork Hours: Monday - Friday, 8:30 a.m. - 5:00 p.m.Position SummaryAt J. J. Keller, we protect people and the businesses they run. The Risk & Compliance Auditor II drives audit, risk, compliance, and information security initiatives to help ensure effective controls, regulatory compliance, and continuous improvement across the organization. This role partners with teams throughout the business to identify risks, manage remediation efforts, and support compliance with industry and customer requirements.Job ResponsibilitiesCoordinates and conducts internal and external audits for SOC 2 Type II, ISO 27001, PCI-DSS, Professional Background Screening Association standards (FCRA) and other standards. Evaluates audit results, recommends improvements, and issues deficiency notices as needed. Evaluates, monitors and consults on resulting corrective action plans and remediation efforts.Coordinates and manages the completion of penetration tests with external consultants and internal resources, and the development, implementation, and monitoring of related corrective action plans, and distribution of resulting reports to interested parties.Reviews policies, guidance and training for information security, and provides consulting services promoting overall achievement of corporate security objectives and compliance with regulatory and customer requirements.Maintains security incident response plans and metrics. Leads evaluation of security incident reports, and execution of incident response efforts, including task management, resource coordination, after action reviews, and incident documentation. Participates in business continuity efforts by assisting with annual security incident tabletop exercises and generating a post-exercise review.Manages the Optro Governance, Risk & Co