GovRAMP & RMF Security Compliance Analyst

Data Recognition Corporation; United States; In loco; USD 80.000 - 110.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical insurance

401(k)

Paid time off

Wellness programs

Descrizione del lavoro

Data Recognition Corporation in Minnesota seeks an Information Security Compliance Analyst to lead risk and compliance activities within the information security program. You will drive GovRAMP, RMF, and audit readiness, and partner with teams to ensure secure operations across the enterprise.

This role requires strong communication, integrity, and the ability to translate technical controls into practical policies, with a focus on maintaining SSPs, POAMs, business continuity, and resilience in

Competenze

• 3+ years in information security, GRC, audit, or compliance.
• Knowledge of NIST 800-53 Rev 5 framework and auditing.
• RMF, STIGs, and POA&M documentation familiarity.
• Experience with SOC 2 Type II audits.

Mansioni

• Obtain GovRAMP compliance.
• Support ATO approvals for government contracts per RMF.
• Develop and manage SSPs, POAMs, and continuous monitoring.
• Oversee internal/external audits: GovRAMP, ISO 27000, SOC 2 II, customer audits.
• Remediate POAM items and drive remediation.
• Policy and standards development and review.
• Mature security risk management practices.
• Manage Business Continuity/Disaster Recovery processes.
• Update security and compliance metrics.

Conoscenze

GRC experience

Information Security

Audit experience

Communication

Teamwork

Formazione

Bachelors IT/Cybersecurity

Descrizione del lavoro

Data Recognition Corporation in Minnesota seeks an Information Security Compliance Analyst to lead risk and compliance activities within the information security program. You will drive GovRAMP, RMF, and audit readiness, and partner with teams to ensure secure operations across the enterprise.

This role requires strong communication, integrity, and the ability to translate technical controls into practical policies, with a focus on maintaining SSPs, POAMs, business continuity, and resilience in