Senior GRC & Compliance Strategist

Jobtailor; Kansas; On-site; USD 70,000 - 90,000; Full time

Job summary

Jobtailor seeks a Compliance & GRC Specialist to join our governance team in the United States. You will align frameworks, risks, controls, and documentation using a GRC platform and support ongoing monitoring and reporting on security and regulatory programs.

You will collaborate with audit teams, control owners, and IT teams to provide evidence, drive assurance, and improve control effectiveness across SOC 1/2, ISO 27001, PCI DSS, NIST, and DoD CMMC. Travel up to 15%.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• Minimum of 2 years in compliance, risk management, governance, or related operations.
• Hands-on experience administering, implementing, or utilizing GRC/IRM platforms.
• Ability to translate complex requirements clearly in communications and documentation.
• Strong analytical, organizational, and problem-solving skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Ability to collaborate with technology teams, auditors, and corporate functions.
• Working knowledge of HITRUST, SOC 1, SOC 2, PCI DSS, ISO 27001, ISO 22301, FISMA/NIST 800-53, NIST CSF, or DoD CMMC.
• CISSP, GSEC, CISA, CRISC, or GCCC certification held or pursued as potential qualification.
• Up to 15% travel to QTS data center locations.

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure.
• Support operational execution, continuous monitoring, and data-driven reporting on security and compliance programs.
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Support internal audits and external audits for SOC 1, SOC 2, ISO 27001, ISO 22301, PCI DSS, FISMA/NIST 800-53, DoD CMMC, and HITRUST.
• Facilitate evidence collection, stakeholder engagement, and issue remediation.
• Partner with control owners to monitor reviews, scope coverage, and control effectiveness and documentation completeness.
• Facilitate implementation, adoption, and continuous improvement of compliance frameworks, standards, and regulatory requirements.
• Integrate controls and documentation into data center and corporate operations.
• Coordinate responses to customer security, compliance, and risk inquiries, evidence requests, questionnaires, and audit requests.
• Coordinate with the risk team on issues requiring documentation or control updates to reduce risk.

Skills

GRC

Integrated Risk Management (IRM)

Analytical thinking

Organizational skills

Problem-solving

Communication

Collaboration

Education

Bachelor’s degree

Tools

GRC platforms

IRM platforms

Job description

Jobtailor seeks a Compliance & GRC Specialist to join our governance team in the United States. You will align frameworks, risks, controls, and documentation using a GRC platform and support ongoing monitoring and reporting on security and regulatory programs.

You will collaborate with audit teams, control owners, and IT teams to provide evidence, drive assurance, and improve control effectiveness across SOC 1/2, ISO 27001, PCI DSS, NIST, and DoD CMMC. Travel up to 15%.