Sr. Security Compliance Analyst - PCI DSS & U.S. FedRAMP

Entrust Corporation; Field (NM); À distance; USD 119 000 - 175 000; Plein temps

Avantages offerts par ce poste

Medical insurance

Vision insurance

Dental insurance

401(k) matching

Life and disability insurance

Mental health coaching

Virtual fitness programs

PTO + 12 holidays

Parental leave

Education reimbursement

Résumé du poste

Entrust is seeking a Senior Security Compliance Analyst to lead and sustain PCI DSS, NIST 800-53, and FedRAMP compliance across cloud, on-prem, and hybrid environments. You will design continuous monitoring, manage audits, and partner with Security, Engineering, and third parties to ensure controls are effective and auditable.

The role emphasizes evidence-driven operations, cross-functional collaboration, and scalable GRC practices, with open remote options for U.S.-based candidates.

Qualifications

• 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls, including how they support one another
• Hands-on PCI DSS and NIST 800-53 compliance experience
• Ability to work across multiple time zones with virtual global teams
• Must be a US Citizen

Responsabilités

• Lead end-to-end compliance across multiple environments, including readiness assessments, audits, and continuous monitoring activities.
• Lead PCI DSS compliance-related activities and certification; support Federal readiness including gap assessments against NIST SP 800-53 and track remediation (POA&M).
• Maintain evidence artifacts and ensure traceability of evidence; translate requirements into actionable control activities for engineering and operations.
• Serve as SME for PCI DSS and NIST 800-53 compliance; advise internal teams and customers; support FedRAMP artifacts.
• Coordinate with third parties to ensure shared control alignment; drive audit readiness and remediation.

Connaissances

PCI DSS

NIST SP 800-53

FedRAMP

GRC

Cloud security

Audit readiness

Cross-functional collaboration

US citizenship

Time-zone coordination

SaaS/cloud-native security

Outils

GRC platforms

Description du poste

Join us at Entrust At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.

Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.

Get to Know Us

Position Overview

Entrust is seeking a highly skilled Senior Security Compliance Analyst to lead and sustain compliance for multiple compliance programs including PCI DSS and U.S. Federal. This role is responsible for designing and executing continuous compliance monitoring activities, identifying gaps and leading associated remediation efforts, planning and leading third-party audits, and measuring control effectiveness across cloud-based, on-prem and hybrid environments. The ideal candidate brings deep PCI DSS expertise, strong knowledge of the Risk Management Framework, FedRAMP and NIST 800-53 frameworks, and modern GRC experience that enables scalable, automated, and evidence-driven compliance operations. This position partners closely with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned to business, statutory and regulatory expectations.

How You Will Make an Impact

Lead and support end-to-end compliance efforts across multiple environments, including readiness assessments, audits, and continuous monitoring activities to ensure sustained security posture and audit readiness.

Responsibilities include, but are not limited to: Leading PCI DSS compliance-related activities and certification; Supporting U.S. Federal readiness efforts, including gap assessments against NIST SP 800-53 and tracking remediation activities (POA&M); Maintaining required evidence artifacts and ensuring traceability of evidence; Interpreting and operationalizing compliance requirements into actionable control activities for engineering and operations; Serving as SME for PCI DSS and NIST 800-53 compliance, advising internal teams and customers; Supporting development of FedRAMP artifacts (e.g., SSP, control narratives, shared responsibility matrices); Partnering with control owners to ensure controls meet PCI DSS and NIST 800-53 requirements; Supporting external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation; Driving coordination with third parties (e.g., service providers, hosting partners) to ensure shared control alignment; Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year; Identifying, assessing, and communicating compliance and security risks to stakeholders; Identifying, tracking, and driving closure of audit findings and control deficiencies; and Contributing to the development and maintenance of security policies, standards, and procedures.

Basic Qualifications

5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls, including how they support one another Hands-on technical and audit experience with PCI DSS and NIST 800-53 compliance Ability to work across multiple time zones with virtual global teams Strong technical understanding of: Cloud environments and shared responsibility models Access control, change management, logging and altering, and vulnerability management and other security domains Experience working in SaaS or cloud-native environments Experience working cross-functionally with engineering and infrastructure teams Must Be a US Citizen

Preferred Qualifications

Experience supporting multiple compliance frameworks (PCI DSS, PCI CP, SOC 2, FedRAMP, NIST 800-53/FISMA, ISO 27001/2, ISO 42001) Experience with modern GRC platforms and control automation Familiarity with continuous compliance / continuous monitoring models Certifications such as: CISSP, CISA, CISM, CRISC, PCI ISA/QSA/PCI CP (preferred but not required)

Where You Will Be

Open to U.S.-based candidates and will be fully remote.

Career Growth

Whether you’re a budding developer or a seasoned expert, we’re invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.

Flexibility

Life is all about balance. Whether you’re remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.

Collaboration

Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.

We believe in securing identities— but it doesn’t stop there.

At Entrust, we’re passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we’re creating a community where everyone is encouraged to be themselves.

Ready to Make an Impact?

If you’re excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let’s build a more secure world—together.

Compensation Range

The anticipated starting base pay for this position is: $119,078-$174,648 per year (in the primary posting location). Actual compensation will be determined based on geographic location, education, skills and experience. This position is also eligible for the company’s discretionary annual incentive plan.

In addition to your pay, Entrust offers eligible colleagues and their dependents comprehensive health and well-being programs which include medical, vision, dental, a generous 401(k) matching contribution, life and disability insurance, mental health coaching, virtual fitness programs, paid personal time off plus 12 paid holidays, parental leave and education reimbursement.

Benefits

• medical
• vision
• dental
• a generous 401(k) matching contribution
• life and disability insurance
• mental health coaching
• virtual fitness programs
• paid personal time off plus 12 paid holidays
• parental leave and education reimbursement

Note: Benefit and Compensation programs are subject to eligibility requirements and other terms of the applicable plan or program. Entrust has the right to end, suspend or amend any of its plans at any time in whole or in part.

Entrust Corporation is an EOE/AA/Veteran/People with Disabilities employer.

Entrust has the right to end, suspend or amend any of its plans at any time in whole or in part. For US roles, or where applicable: Entrust is an EEO/AA/Disabled/Veterans Employer For Canadian roles, or where applicable: Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities. If you require an accommodation, contact [e-mail].

Follow us on, LinkedIn, Facebook, Instagram, and YouTube.