Hybrid Compliance Analyst - SOC 2 & NIST

National Association of Insurance Commissioners (NAIC); Kansas City (MO); Hybrid; USD 81,000 - 100,000; Full time

Job summary

The National Association of Insurance Commissioners (NAIC) seeks a Compliance Analyst for its Information Technology division. The role designs, governs, and maintains NAIC’s security and compliance control framework, supporting SOC 2, NIST SP 800-53, GovRAMP, and PCI DSS, while collaborating with Security, IT, Legal, Internal Audit, and business stakeholders.

This full-time hybrid position requires residency within 100 miles of the Kansas City office.

Qualifications

• Bachelor’s degree and 5–7 years of governance, risk, compliance, or information security experience.
• Experience with SOC 2, NIST SP 800-53, GovRAMP, or similar frameworks.
• Familiarity with vendor risk assessments and policy management.

Responsibilities

• Conduct Third-Party Risk Management (TPRM) activities, including security risk assessments for new vendors and periodic reassessments.
• Develop, maintain, and oversee security policies, standards, procedures, and supporting documentation.
• Coordinate the annual review, update, approval, and publication of security policies and compliance documentation.
• Support governance, risk, and compliance initiatives by documenting and monitoring security controls.
• Coordinate Business Continuity Planning and Disaster Recovery activities, including testing and lessons learned.
• Support security awareness and training programs and audit evidence collection.

Skills

Governance & risk management

Information security

Policy management

Vendor risk assessments

Education

Bachelor’s degree

Tools

Microsoft Office 365

AWS

Jira Cloud

GRC platforms

Job description

The National Association of Insurance Commissioners (NAIC) seeks a Compliance Analyst for its Information Technology division. The role designs, governs, and maintains NAIC’s security and compliance control framework, supporting SOC 2, NIST SP 800-53, GovRAMP, and PCI DSS, while collaborating with Security, IT, Legal, Internal Audit, and business stakeholders.

This full-time hybrid position requires residency within 100 miles of the Kansas City office.