Senior PCI & RMF Compliance Analyst

Jobtome; North Dakota; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Benefits package

Job summary

Spectrum in North Dakota seeks a senior information security and regulatory compliance professional to lead advisory and oversight across PCI, NIST, RMF-based programs. You will coordinate audits, define control requirements, and help customers achieve compliance with security policies and standards.

You will partner with IT, security, and business teams to translate complex regulatory concepts into practical controls, drive remediation, and report findings to leadership.

Qualifications

• Advanced knowledge of PCI, NIST 800-53, NIST 800-171, NIST SP 800-154, or the RMF.
• Advanced understanding of networks, systems, data flows, and IT operations.
• Advanced experience with data security and privacy regulations and common security tools.
• Strong analytical and critical-thinking skills.
• Ability to prioritize multiple tasks and meet deadlines.
• Clear written and verbal communication skills, including translating technical concepts for non-technical audiences.
• Demonstrated ability to work collaboratively across teams and build effective working relationships.
• Advanced knowledge of industry security, regulatory, and legal compliance considerations.
• Ability to develop and maintain security policies, standards, and other related legal standards.
• Expert experience with at least six security frameworks such as SOC 2, ISO, NIST, COSO, COBIT, PCI, or CIS.

Responsibilities

• Establish an advisory and effective challenge model to facilitate information security discussions, identify risks and control gaps, and provide insights that support strategic, risk-based decision-making.
• Support PCI, CMMC, and other regulatory and compliance efforts, including audit planning and coordination, evidence collection, control reviews, auditor requests, and compliance responses. Recommend process enhancements to improve compliance effectiveness and audit readiness.
• Evaluate, test, and document PCI, NIST, and other security best-practice controls; assess control design and operating effectiveness; identify gaps; and support remediation plans, issue tracking, and validation of corrective actions.
• Recommend, develop, and maintain security policies, standards, procedures, guidance, control documentation, and related compliance records to support alignment with corporate requirements.
• Interpret and explain security policies, standards, and regulatory requirements to technical and non-technical stakeholders. Collaborate with control owners, IT, and business teams to establish practical compliance expectations and improve understanding of security best practices.
• Support ongoing compliance monitoring, audit evidence tracking, reporting of findings and remediation status, and preparation of compliance metrics and updates for relevant stakeholders.
• Support customer compliance inquiries, due diligence, and assurance requests in coordination with internal teams.
• Conduct research using authoritative security sources, vendor documentation, and industry best practices to inform compliance advice and recommended control improvements.
• Partner with Security Awareness and other teams on training, communications, and articles related to security policies, standards, and compliance obligations.

Skills

PCI

NIST RMF

Regulatory compliance

Audit coordination

Policy development

Communication skills

Analytical thinking

Cloud security

Cross-team collaboration

Education

Bachelor's degree in Information Security

CISSP certification

Tools

ServiceNow

GRC platforms

Audit tools

Job description

Spectrum in North Dakota seeks a senior information security and regulatory compliance professional to lead advisory and oversight across PCI, NIST, RMF-based programs. You will coordinate audits, define control requirements, and help customers achieve compliance with security policies and standards.

You will partner with IT, security, and business teams to translate complex regulatory concepts into practical controls, drive remediation, and report findings to leadership.