Senior Compliance Analyst – PCI/NIST & GRC

Spectrum, LLC; Raleigh (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

Spectrum is seeking a Compliance Analyst VII to support its GRC program, driving audit readiness and control effectiveness across PCI and NIST standards. You'll collaborate with IT and business teams to translate security requirements into practical expectations.

Applicants should have 6+ years in IT security or corporate audit, strong communication skills, and CISSP or equivalent credentials. The role emphasizes policy development and cross-team collaboration.

Qualifications

• Bachelor’s degree in information security, CS, IS, or related field; 6+ years IT security or audit experience preferred.
• CISSP certification or equivalent recognized credential.
• Strong knowledge of PCI, NIST 800-53/171, and RMF concepts.

Responsibilities

• Support PCI, NIST, and other regulatory compliance efforts, including audit planning and evidence collection.
• Evaluate and document control design and operating effectiveness; assist remediation tracking.
• Develop and maintain security policies and related compliance records.

Skills

PCI knowledge

NIST frameworks

Audit coordination

Regulatory compliance

Policy development

Stakeholder communication

Risk assessment

Cloud security

Education

Bachelor's degree in Information Security / CS / IS

CISSP certification

Tools

ServiceNow

GRC platforms

Audit/evidence management tools

Job description

Spectrum is seeking a Compliance Analyst VII to support its GRC program, driving audit readiness and control effectiveness across PCI and NIST standards. You'll collaborate with IT and business teams to translate security requirements into practical expectations.

Applicants should have 6+ years in IT security or corporate audit, strong communication skills, and CISSP or equivalent credentials. The role emphasizes policy development and cross-team collaboration.