IT Risk and Compliance Analyst (Fully Remote)

Not Specified; United States; Remote; USD 60,000 - 90,000; Full time

Job summary

Not Specified is seeking an experienced compliance professional to support a growing IT risk, privacy, and governance program in a remote US-based role. You will collaborate with Legal, IT, Delivery, and leadership to translate requirements into controls and measurable safeguards.

You will review client agreements and security questionnaires, manage evidence for vendors, and help shape a program from the ground up, embracing a small, collaborative team that values diverse perspectives.

Qualifications

• 3–5 years of experience in compliance, GRC, contract management, or privacy.
• Knowledge of SOC 2, ISO 27001, or NIST CSF.
• Remote work within the United States.
• Opportunity to help shape a program from the ground up.

Responsibilities

• Review client agreements and security questionnaires.
• Manage control evidence and vendor risk.
• Support privacy, data retention, and compliance policies.

Skills

GRC

Contract management

Privacy

SOC 2

ISO 27001

NIST CSF

Job description

• Support a growing IT risk, compliance, privacy, and governance program.
• Collaborate with Legal, IT, Delivery, and leadership to translate requirements into controls.

Key Responsibilities:

• Review client agreements and security questionnaires.
• Manage control evidence and vendor risk.
• Support privacy, data retention, and compliance policies.

Requirements:

• 3–5 years of experience in compliance, GRC, contract management, or privacy.
• Knowledge of SOC 2, ISO 27001, or NIST CSF.
• Remote work within the United States.
• Opportunity to help shape a program from the ground up.

Not Specified

Our partner provides IT risk, compliance, privacy, and governance services for clients. They have a small, collaborative team and value diverse perspectives and authentic contributions.