GRC & Risk Analyst – SOC 2, ISO 27001, PCI

CloudData; United States; On-site; USD 80,000 - 100,000; Full time

Job summary

CloudData is looking for a Compliance & Risk Analyst to support security engagements and regulatory compliance mapping across SOC 2, ISO 27001, PCI DSS, and other frameworks. The role requires strong skills in risk assessment, documentation, and policy development.

The ideal candidate should have over 4 years of experience in GRC or compliance within the technology or data center sectors. Knowledge of FedRAMP, FISMA, or NCA compliance would be an asset.

Qualifications

• 4+ years in GRC, compliance, or risk management in technology or data center environments.
• Strong knowledge of SOC 2, ISO 27001, PCI DSS, HIPAA, and NIST frameworks.
• Excellent documentation and policy writing skills.

Responsibilities

• Conduct risk assessments and gap analyses against compliance frameworks.
• Map client security controls to various standards.
• Develop policies and procedures for audit readiness.
• Coordinate with auditors and maintain compliance evidence.
• Support data center compliance reviews.

Skills

Risk assessments

Compliance frameworks knowledge

Documentation skills

Policy writing

Tools

ServiceNow GRC

Archer

Vanta

Job description

CloudData is looking for a Compliance & Risk Analyst to support security engagements and regulatory compliance mapping across SOC 2, ISO 27001, PCI DSS, and other frameworks. The role requires strong skills in risk assessment, documentation, and policy development.

The ideal candidate should have over 4 years of experience in GRC or compliance within the technology or data center sectors. Knowledge of FedRAMP, FISMA, or NCA compliance would be an asset.