GovRAMP & RMF Compliance Analyst - Security & Audits

Colonial Group; Maple Grove (MN); On-site; USD 75,000 - 110,000; Full time

Job summary

Data Recognition Corporation - Minnesota is seeking an Information Security Compliance Analyst to manage and lead risk and compliance activities, including internal and external security reviews that validate our security program.

The role supports security policy upkeep, raises security awareness, and enhances business continuity and resiliency. Collaboration across teams is essential to drive governance and compliance maturity.

Qualifications

• 3+ years in information security, GRC, audit, or compliance.
• Knowledge of NIST 800-53 Rev 5 and implementation/audit.
• Familiar with RMF, STIGs, and POA&M documentation.
• Experience with SOC 2 Type II audits.

Responsibilities

• Obtain and maintain GovRAMP compliance.
• Support ATO approvals per RMF guidelines.
• Develop and manage SSPs, POAMs, and monitor controls.
• Coordinate internal and external audits (GovRAMP, ISO 27000, SOC II).
• Remediate POAM items and update security metrics.
• Develop/update security policies and standards.
• Mature risk management practices across the organization.
• Manage Business Continuity/Disaster Recovery processes.

Skills

Information Security

GRC

Audit

Compliance

Communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

GovRAMP

FedRAMP

NIST RMF

Job description

Data Recognition Corporation - Minnesota is seeking an Information Security Compliance Analyst to manage and lead risk and compliance activities, including internal and external security reviews that validate our security program.

The role supports security policy upkeep, raises security awareness, and enhances business continuity and resiliency. Collaboration across teams is essential to drive governance and compliance maturity.