Data Center GRC Analyst: SOC 2, ISO 27001, PCI

rowan.com; Denver (CO); Hybrid; USD 90,000 - 105,000; Full time

Benefits offered by this job

Hybrid work environment

Relocation assistance

Unlimited PTO

401(k) company contribution

Competitive benefits including health

Job summary

Rowan Digital Infrastructure is seeking a Compliance Analyst to support the SOC 2, ISO 27001, and PCI DSS programs. You will coordinate evidence, monitor controls, and assist audits across data center operations and IT teams.

You will partner with Operations, Security, Facilities, and Legal to ensure ongoing audit readiness and risk management, while enabling business growth with compliant processes.

Qualifications

• 3+ years of experience in compliance, risk management, internal audit, information security, or governance-related roles
• Strong analytical, organizational, and project management skills with high attention to detail
• Excellent written and verbal communication skills, with the ability to influence stakeholders across multiple departments
• Experience supporting SOC 1 / SOC 2, ISO 27001, or PCI DSS 4.0, including working with external auditors, assessors, or certification bodies
• Understanding of IT general, information security, and operational controls, with experience performing risk assessments and tracking remediation

Responsibilities

• Maintain continuous audit readiness for SOC 2, ISO 27001, and PCI DSS by coordinating control owner activities, reviewing artifacts, and preparing stakeholders for assessments
• Manage centralized evidence repositories, coordinating evidence standards with control owners to collect and validate audit evidence
• Serve as primary liaison with external auditors, assessors, and certification bodies for annual SOC 2, ISO 27001, and PCI DSS activities
• Monitor control performance, identify gaps, and follow up on overdue activities and control failures
• Track audit findings, control deficiencies, risk treatment actions, and remediation closure
• Facilitate risk assessments across data center and technology operations, and maintain risk registers
• Coordinate ISO 27001 internal audit program schedules, plans, and follow-through
• Develop and maintain compliance policies, procedures, and control documentation
• Support customer due diligence requests and security questionnaires
• Partner with Data Center Operations, IT, Security, Facilities, and Legal to provide compliance guidance and leadership dashboards

Skills

Communication

Analytical thinking

Project management

Attention to detail

Education

Bachelor’s degree in Information Security / related field

Tools

GRC platforms (Vanta, Drata, Workiva)

Job description

Rowan Digital Infrastructure is seeking a Compliance Analyst to support the SOC 2, ISO 27001, and PCI DSS programs. You will coordinate evidence, monitor controls, and assist audits across data center operations and IT teams.

You will partner with Operations, Security, Facilities, and Legal to ensure ongoing audit readiness and risk management, while enabling business growth with compliant processes.