Remote IT Security & Compliance Analyst

Kcecareers; Beaverton (OR); Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Discounted child care

Medical, dental, and vision benefits

Employee assistance programs

Health and wellness programs

Paid time off

Job summary

KinderCare Learning Companies is seeking a meticulous IT Security & Compliance Analyst to join its Information Security organization and help protect the company’s systems, data, and technology environment.

You will support security and compliance programs across cloud and on‑premises infrastructures, assess risks, strengthen controls, and help ensure the organization meets applicable security and regulatory requirements. Reporting to the Head of Information Security.

Qualifications

• Bachelor’s degree and 3–5 years in information security, IT audit, or GRC.
• Knowledge of NIST, ISO 27001, SOC 2, COBIT 5, PCI DSS, SOX, ITGC.
• Experience documenting, implementing, and testing IT security and compliance controls.
• Ability to analyze processes, identify gaps, and manage multiple deadlines.

Responsibilities

• Define security, compliance, and control requirements; assess risks and remediation plans.
• Prepare compliance assessments, audit evidence, risk docs, policies, and reporting.
• Analyze risks and controls across cloud and on-prem; apply frameworks to strengthen controls.
• Test ITGC, SOX, PCI DSS; support audits and track findings through remediation.
• Maintain compliance program, risk register, policies, and support new assessments.

Skills

Information Security

IT Audit

GRC

NIST knowledge

ISO 27001

SOC 2

PCI DSS

SOX

ITGC

Risk assessment

Education

Bachelor’s degree in Information Science/IT/Cybersecurity

Job description

KinderCare Learning Companies is seeking a meticulous IT Security & Compliance Analyst to join its Information Security organization and help protect the company’s systems, data, and technology environment.

You will support security and compliance programs across cloud and on‑premises infrastructures, assess risks, strengthen controls, and help ensure the organization meets applicable security and regulatory requirements. Reporting to the Head of Information Security.