Hybrid Security & Compliance Analyst — SOC 2, NIST, GovRAMP

National Association of Insurance Commissioners (NAIC); Kansas City (MO); Híbrido; USD 81.000 - 100.000; Jornada completa

Descripción de la vacante

The National Association of Insurance Commissioners (NAIC) in Kansas City, MO seeks a Compliance Analyst to design and govern our security and compliance controls. You will work with Security, IT, Legal, Internal Audit, and business teams to strengthen governance and continuously improve our cybersecurity program.

Required: a Bachelor's degree and 5–7 years in governance, risk, compliance, or information security; experience with SOC 2, NIST SP 800-53, GovRAMP, or PCI DSS.

Formación

• Bachelor's degree and 5-7 years of governance, risk, compliance or information security experience.
• Experience with SOC 2, NIST SP 800-53, GovRAMP or similar frameworks.
• Familiarity with vendor risk assessments and policy management.

Responsabilidades

• Conduct Third-Party Risk Management (TPRM) activities, including security risk assessments for new vendors and oversight of remediation.
• Develop, maintain, and oversee security policies, standards, procedures, and supporting documentation in line with frameworks.
• Coordinate annual review, update, approval, and publication of security policies and compliance documentation.

Conocimientos

Governance

Risk management

Compliance

Information security

Vendor risk assessments

Educación

Bachelor's degree

Herramientas

Microsoft Office 365

AWS

Jira Cloud

GRC platforms

Descripción del empleo

The National Association of Insurance Commissioners (NAIC) in Kansas City, MO seeks a Compliance Analyst to design and govern our security and compliance controls. You will work with Security, IT, Legal, Internal Audit, and business teams to strengthen governance and continuously improve our cybersecurity program.

Required: a Bachelor's degree and 5–7 years in governance, risk, compliance, or information security; experience with SOC 2, NIST SP 800-53, GovRAMP, or PCI DSS.