Senior Technical Compliance Analyst

Jobtailor; Kansas; On-site; USD 70,000 - 90,000; Full time

Job summary

Jobtailor seeks a Compliance & GRC Specialist to join our governance team in the United States. You will align frameworks, risks, controls, and documentation using a GRC platform and support ongoing monitoring and reporting on security and regulatory programs.

You will collaborate with audit teams, control owners, and IT teams to provide evidence, drive assurance, and improve control effectiveness across SOC 1/2, ISO 27001, PCI DSS, NIST, and DoD CMMC. Travel up to 15%.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• Minimum of 2 years in compliance, risk management, governance, or related operations.
• Hands-on experience administering, implementing, or utilizing GRC/IRM platforms.
• Ability to translate complex requirements clearly in communications and documentation.
• Strong analytical, organizational, and problem-solving skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Ability to collaborate with technology teams, auditors, and corporate functions.
• Working knowledge of HITRUST, SOC 1, SOC 2, PCI DSS, ISO 27001, ISO 22301, FISMA/NIST 800-53, NIST CSF, or DoD CMMC.
• CISSP, GSEC, CISA, CRISC, or GCCC certification held or pursued as potential qualification.
• Up to 15% travel to QTS data center locations.

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure.
• Support operational execution, continuous monitoring, and data-driven reporting on security and compliance programs.
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Support internal audits and external audits for SOC 1, SOC 2, ISO 27001, ISO 22301, PCI DSS, FISMA/NIST 800-53, DoD CMMC, and HITRUST.
• Facilitate evidence collection, stakeholder engagement, and issue remediation.
• Partner with control owners to monitor reviews, scope coverage, and control effectiveness and documentation completeness.
• Facilitate implementation, adoption, and continuous improvement of compliance frameworks, standards, and regulatory requirements.
• Integrate controls and documentation into data center and corporate operations.
• Coordinate responses to customer security, compliance, and risk inquiries, evidence requests, questionnaires, and audit requests.
• Coordinate with the risk team on issues requiring documentation or control updates to reduce risk.

Skills

GRC

Integrated Risk Management (IRM)

Analytical thinking

Organizational skills

Problem-solving

Communication

Collaboration

Education

Bachelor’s degree

Tools

GRC platforms

IRM platforms

Job description

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure
• Support operational execution, continuous monitoring, and data-driven reporting on QTS security and compliance programs
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards
• Support internal audits and external audits for SOC 1, SOC 2, ISO 27001, ISO 22301, PCI DSS, FISMA/NIST 800-53, DoD CMMC, and HITRUST
• Facilitate evidence collection, stakeholder engagement, and issue remediation
• Partner with control owners to monitor reviews, scope coverage, and control effectiveness and documentation completeness
• Facilitate implementation, adoption, and continuous improvement of compliance frameworks, standards, and regulatory requirements
• Integrate controls and documentation into data center and corporate operations
• Coordinate responses to customer security, compliance, and risk inquiries, evidence requests, questionnaires, and audit requests
• Coordinate with the risk team on issues requiring documentation or control updates to reduce risk

Requirements

• Bachelor’s degree or equivalent professional experience
• Minimum of 2 years of experience supporting compliance, risk management, governance, or a related operational function
• Hands-on experience administering, implementing, or utilizing Governance, Risk, and Compliance (GRC) or Integrated Risk Management (IRM) platforms
• Ability to translate complex requirements clearly and concisely in communications and documentation
• Strong analytical, organizational, and problem-solving skills
• Ability to manage multiple priorities and deadlines in a fast-paced environment
• Ability to build and maintain collaborative relationships across technology teams, operational teams, auditors, and corporate support functions
• Working knowledge of one or more of HITRUST, SOC 1, SOC 2, PCI DSS, ISO 27001, ISO 22301, FISMA/NIST 800-53, NIST Cybersecurity Framework, or DoD CMMC
• CISSP, GSEC, CISA, CRISC, or GCCC certification held or actively pursued is a potential qualification
• Up to 15% travel to QTS data center locations

Core Competencies

Demonstrates expertise in Governance, Risk, and Compliance (GRC) frameworks, with a strong focus on compliance program execution, risk management, and regulatory requirements. Proficient in analytical reporting and stakeholder engagement to enhance program maturity and control effectiveness.

Highest-signal resume keywords

• Governance, Risk, And Compliance (GRC)
• Compliance Program Execution
• Risk Management
• SOC 1, SOC 2, ISO 27001, PCI DSS
• Analytical Reporting

ATS Optimization Keywords

Hard Skills

• Governance, Risk, And Compliance (GRC)
• Integrated Risk Management (IRM)
• Compliance Frameworks
• Risk Assessment
• Data-Driven Reporting
• Control Effectiveness Monitoring
• Evidence Collection
• Stakeholder Engagement
• Issue Remediation
• Documentation Management

Soft Skills

• Analytical Skills
• Organizational Skills
• Problem-Solving Skills
• Communication Skills
• Collaboration Skills

Certifications & Qualifications

• CISSP
• GSEC
• CISA
• CRISC
• GCCC

Industry Keywords

• ISO 22301
• FISMA/NIST 800-53
• DoD CMMC
• HITRUST
• NIST Cybersecurity Framework