IT Security Compliance Analyst

Company Overview

At Guarantee Trust Life Insurance Company (GTL), employees join a company with nearly 90 years of stability, purpose, and forward momentum. Founded in 1936 and headquartered in Glenview, Illinois, GTL blends timeless values—integrity, quality products, and personal service—with innovative life and health insurance solutions that help policyholders and distributors across the country.

Where You’ll Work

This position is required to work on-site in our Omaha-area (Elkhorn, NE) office most days. Everyone receives 3 flexible remote days per month. And, we offer half-day Fridays – every Friday!

Role Overview

The ideal candidate will be part of the team responsible for ensuring our enterprise applications, systems, and data environments meet regulatory requirements and security standards. This role includes assessing, implementing, and maintaining security compliance controls to protect sensitive information, reduce risk, and support business operations.

You will be a key member of our IT team, working to monitor regulatory compliance, conduct risk assessments, support audits, and help optimize our security posture. If you want to make a meaningful impact, work with smart and innovative people, and grow your career in cybersecurity compliance, come join us! It’s a great time to join GTL!

Responsibilities

• Conduct regular compliance assessments and audits of IT systems, applications, and processes to ensure adherence to regulatory requirements and industry standards (e.g., HIPAA, NIST, PCI-DSS, ISO 27001).
• Develop, implement, and maintain security policies, procedures, and controls to protect sensitive data and meet compliance obligations.
• Perform risk assessments, identify compliance gaps, and recommend remediation actions to strengthen the organization’s security posture.
• Monitor and review security controls, access management, and data protection measures across enterprise systems.
• Assist with internal and external audits, including preparation of documentation, evidence collection, and remediation tracking.
• Collaborate with IT teams, developers, system engineers, and business stakeholders to integrate compliance requirements into projects and daily operations.
• Stay current with evolving laws, regulations, and best practices in information security and privacy.
• Support the creation and delivery of security awareness training and compliance reporting for management.
• Participate in the general periodic on-call rotation providing ad-hoc support as needed.