Hybrid Security & Compliance Analyst (SOC 2/NIST)

National Association of Insurance Commissioners; Kansas City (MO); Hybrid; USD 81,000 - 100,000; Full time

Job summary

The National Association of Insurance Commissioners (NAIC) seeks a Compliance Analyst to design, govern, and maintain its security and compliance control framework. You will collaborate with Security, IT, Legal, and Audit teams to strengthen governance and drive improvements across cybersecurity and compliance programs.

Minimum qualifications include a bachelor’s degree and 5–7 years in governance, risk, or information security, with experience in SOC 2, NIST SP 800-53, GovRAMP, or similar.

Qualifications

• Bachelor’s degree and 5–7 years of experience in governance, risk, compliance, or information security.
• Experience with SOC 2, NIST SP 800-53, GovRAMP, or similar frameworks.
• Familiarity with vendor risk assessments and policy management.

Responsibilities

• Conduct Third-Party Risk Management activities, including security risk assessments and vendor oversight.
• Develop, maintain, and oversee security policies, standards, procedures, and documentation to align with frameworks.
• Coordinate the annual review, update, and publication of security policies and compliance documents.
• Support governance, risk, and compliance initiatives by developing and monitoring security controls.
• Coordinate Business Continuity Planning and Disaster Recovery activities, including testing and updates.
• Support security awareness and training programs with content updates and training metrics.

Skills

Governance

Risk management

Compliance

Information security

Education

Bachelor’s degree

Tools

Jira Cloud

GRC platforms

AWS

Microsoft Office 365

Job description

The National Association of Insurance Commissioners (NAIC) seeks a Compliance Analyst to design, govern, and maintain its security and compliance control framework. You will collaborate with Security, IT, Legal, and Audit teams to strengthen governance and drive improvements across cybersecurity and compliance programs.

Minimum qualifications include a bachelor’s degree and 5–7 years in governance, risk, or information security, with experience in SOC 2, NIST SP 800-53, GovRAMP, or similar.