Hybrid: Risk & Compliance Analyst

Illumia, LLC; Alpharetta, Northern (GA, KY); Hybrid; USD 85,000 - 125,000; Full time

Benefits offered by this job

Flexible time off

Health, dental, and vision insurance

Employee Assistance Program (EAP)

Employer-paid life insurance/AD&D/SSDI

FSA or HSA

401(k) match

Employee stock purchase plan

Job summary

Illumia is seeking an experienced Business Risk Analyst to support information security compliance, GRC workflow, and risk management initiatives. This role will coordinate audits, manage risk issues, and track KPIs across IT and business units.

The ideal candidate has 5+ years in security, risk, or compliance, and experience with frameworks like SOC 2, PCI DSS, HIPAA, GovRAMP, and NIST CSF. Hybrid work option applies to Alpharetta, GA or Scottsdale, AZ, with travel as needed.

Qualifications

• 5+ years of experience in information security, risk management, or compliance.
• Working knowledge of SOC 2, PCI DSS, HIPAA, GovRAMP, NIST CSF or similar frameworks.
• Prior experience managing process workflows within TPRM due diligence cycles and vendor/partner onboarding.
• Experience tracking and analyzing external audits, KPIs, and compliance evidence collection with attention to detail.
• Strong analytical, communication, and project management skills.
• Ability to communicate clearly with technical and non-technical stakeholders.

Responsibilities

• Track compliance status, action items, and report progress via KPIs to management on a regular basis.
• Prepare risk reports and dashboards for senior leadership and internal committees.
• Assist with the development and maintenance of risk registers and track mitigation plans.
• Support the execution of risk assessments and security control reviews across business units and IT environments.
• Assist in compliance efforts of evidence collection and control testing projects with third-party auditors and internal assessments.
• Maintain organized documentation for audit readiness and compliance tracking.
• Coordinate with internal teams to gather responses to auditor inquiries and remediate identified gaps.
• Assist and evaluate third-party vendor and partner workflows and document initial and ongoing third-party due diligence.
• Help evaluate the effectiveness of technical and administrative security controls.
• Assist with the development and maintenance of compliance-related policies, standards, and procedures.
• Works independently with clear direction and flags issues early to maintain momentum.

Skills

Information security

Risk management

Compliance frameworks

Vendor due diligence

Audits & KPIs

Communication

Education

Bachelor's degree in Information Security / IT / Compliance

Tools

AuditBoard/Optro

Job description

Illumia is seeking an experienced Business Risk Analyst to support information security compliance, GRC workflow, and risk management initiatives. This role will coordinate audits, manage risk issues, and track KPIs across IT and business units.

The ideal candidate has 5+ years in security, risk, or compliance, and experience with frameworks like SOC 2, PCI DSS, HIPAA, GovRAMP, and NIST CSF. Hybrid work option applies to Alpharetta, GA or Scottsdale, AZ, with travel as needed.