Data Center Compliance Analyst

rowan.com; Denver (CO); Hybrid; USD 90,000 - 105,000; Full time

Benefits offered by this job

Hybrid work environment

Relocation assistance

Unlimited PTO

401(k) company contribution

Competitive benefits including health

Job summary

Rowan Digital Infrastructure is seeking a Compliance Analyst to support the SOC 2, ISO 27001, and PCI DSS programs. You will coordinate evidence, monitor controls, and assist audits across data center operations and IT teams.

You will partner with Operations, Security, Facilities, and Legal to ensure ongoing audit readiness and risk management, while enabling business growth with compliant processes.

Qualifications

• 3+ years of experience in compliance, risk management, internal audit, information security, or governance-related roles
• Strong analytical, organizational, and project management skills with high attention to detail
• Excellent written and verbal communication skills, with the ability to influence stakeholders across multiple departments
• Experience supporting SOC 1 / SOC 2, ISO 27001, or PCI DSS 4.0, including working with external auditors, assessors, or certification bodies
• Understanding of IT general, information security, and operational controls, with experience performing risk assessments and tracking remediation

Responsibilities

• Maintain continuous audit readiness for SOC 2, ISO 27001, and PCI DSS by coordinating control owner activities, reviewing artifacts, and preparing stakeholders for assessments
• Manage centralized evidence repositories, coordinating evidence standards with control owners to collect and validate audit evidence
• Serve as primary liaison with external auditors, assessors, and certification bodies for annual SOC 2, ISO 27001, and PCI DSS activities
• Monitor control performance, identify gaps, and follow up on overdue activities and control failures
• Track audit findings, control deficiencies, risk treatment actions, and remediation closure
• Facilitate risk assessments across data center and technology operations, and maintain risk registers
• Coordinate ISO 27001 internal audit program schedules, plans, and follow-through
• Develop and maintain compliance policies, procedures, and control documentation
• Support customer due diligence requests and security questionnaires
• Partner with Data Center Operations, IT, Security, Facilities, and Legal to provide compliance guidance and leadership dashboards

Skills

Communication

Analytical thinking

Project management

Attention to detail

Education

Bachelor’s degree in Information Security / related field

Tools

GRC platforms (Vanta, Drata, Workiva)

Job description

At Rowan Digital Infrastructure, we are transforming data center delivery for speed and scale. Our mission is to deliver best-in‑class data center solutions to hyperscale customers who share our commitment to sustainability, and to do so with an unwavering focus on efficiency, quality, and flexibility. Our data center solutions are tailored to our customers’ needs and delivered by our exceptional end‑to‑end team. Rowan is assembling a strategic portfolio of data center sites in Tier 1 markets across the United States at various stages of development, and we’re looking for incredible and passionate people to help us advance our company and our commitment to building a more sustainable future.

Rowan is backed by Quinbrook, a leading investor in the energy transition, and Blackstone, the world’s largest alternative asset manager.

Role Summary

As Rowan grows its data center footprint and customer base, the Compliance Analyst provides the operational capacity to run and sustain Rowan’s second-line Governance, Risk, and Compliance (GRC) program across SOC 2, ISO 27001, and PCI DSS. This Senior Associate-level Compliance Analyst role keeps compliance activities continuously managed rather than treated as periodic events: coordinating evidence collection, monitoring control performance, supporting audits, tracking remediation, facilitating risk assessments, and running the ISO 27001 internal audit program. Working closely with Data Center Operations, IT, Information Security, Facilities, and other stakeholders, the Compliance Analyst frees operational teams to focus on running the business while keeping Rowan audit‑ready year‑round. The role reports to the SOC Compliance Manager.

Travel: Ability to travel 25-50% depending on project needs

Location: Temple, TX or Denver, CO (3-day hybrid in-office/on-site role)

Compensation: $90K - $105K (Offers Bonus)

Essential Responsibilities

• Maintain continuous audit readiness for SOC 2, ISO 27001, and PCI DSS by coordinating control owner activities, reviewing audit artifacts throughout the year, and preparing stakeholders for assessments
• Manage centralized evidence repositories, working with control owners to agree on evidence standards and to collect, validate, and maintain audit evidence, building internal capability that reduces reliance on external consultants
• Serve as a primary liaison with external auditors, assessors, and certification bodies, coordinating schedules, evidence requests, walkthroughs, and testing for annual SOC 2 examinations, ISO 27001 certification and surveillance audits, and PCI DSS activities
• Monitor control performance through periodic reviews and testing, identify compliance gaps early, and follow up with control owners on overdue activities and control failures
• Track audit findings, control deficiencies, risk treatment actions, and corrective action plans through closure, coordinating remediation with owners and validating closure evidence
• Facilitate risk assessments across data center and technology operations, document risk treatment strategies, and maintain risk registers and mitigation tracking
• Coordinate and run the ISO 27001 internal audit program, including audit schedules and plans, internal audits, reports, and corrective action follow-through
• Develop and maintain compliance policies, procedures, and control documentation, and monitor evolving regulatory, industry, and customer requirements for potential impacts
• Support customer due diligence requests and security questionnaires to reduce friction in customer reviews and sales cycles
• Partner with Data Center Operations, Physical Security, IT, Information Security, Facilities, and Legal to provide compliance guidance to control owners, and produce dashboards and status reporting for leadership on audit readiness, remediation, and risk

Education, Skills, and Experience

• Bachelor’s degree in Information Security, Information Systems, Cybersecurity, Risk Management, Business Administration, Accounting, Audit, or a related discipline
• 3+ years of experience in compliance, risk management, internal audit, information security, or governance-related roles
• Experience supporting SOC 1 / SOC 2, ISO 27001, or PCI DSS 4.0, including working with external auditors, assessors, or certification bodies
• Understanding of IT general, information security, and operational controls, with experience performing risk assessments and tracking remediation
• Strong analytical, organizational, and project management skills with high attention to detail
• Excellent written and verbal communication skills, with the ability to influence stakeholders and drive accountability across multiple departments

Preferred Experience

• Experience in a colocation, hyperscale, cloud, managed services, or enterprise data center environment, with familiarity with physical security and environmental controls
• Experience with GRC platforms such as Vanta, Drata, or Workiva, and knowledge of ITIL, NIST 800-53, NIST CSF, or CIS Controls
• Certifications: CISA, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or Lead Implementer, PCI ISA, or CIA

Fueled by Excellence & Collaboration

At Rowan, we are a distributed team united by a common mission to transform data center delivery. Across our two offices, we offer a hybrid work environment supported by teamwork, technology, and in-office gathering time to help you be successful. We are headquartered in downtown Denver, Colorado and have an office in Seattle, Washington. Our team of talented and passionate individuals is spread out across the U.S.

Here to support you

At Rowan, we want to make sure you can do great work. We offer competitive benefits focused on helping you be and achieve your best.

• Hybrid working environment
• Team building and educational opportunities
• Generous benefits package including robust health benefits and a 401(k)-company contribution
• Unlimited PTO
• RTD ECO pass or parking reimbursement
• Competitive compensation, bonus, and an incentive plan
• Relocating for this role? We offer relocation assistance on a case-by-case basis to help make your transition smooth

Equal Opportunity Employer

Rowan Digital is an equal opportunity employer. We welcome and celebrate diversity in all aspects of our workforce. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other legally protected status. We strive to create an inclusive environment where everyone can thrive.