Information Security Compliance Analyst

This is a fully remote position, open to applicants in Minnesota.

📋 Description

• Acquire and uphold GovRAMP compliance.

• Facilitate Authority to Operate (ATO) approvals for government contracts by following the NIST Risk Management Framework (RMF).

• Create and oversee System Security Plan (SSP) documentation along with Plans of Action and Milestones (POAMs).

• Evaluate and audit system security controls while conducting continuous monitoring activities.

• Coordinate internal and external annual audits, including those from third parties and customers.

• Sustain and drive the remediation of POAM items.

• Formulate and review security policies and standards.

• Enhance security risk management practices.

• Administer and improve Business Continuity/Disaster Recovery processes.

• Update and maintain security and compliance metrics.

• Support security awareness initiatives and other facets of the security practice.

• Advocate for business continuity and resilience efforts.

• Operate without direct reports; other responsibilities may be assigned by the employer.

⛳️ Requirements

• A minimum of 3 years of experience in Information Security, Governance, Risk, and Compliance (GRC), auditing, or compliance.

• Proficient understanding of the NIST 800-53 Rev 5 framework, including implementation and auditing practices.

• General familiarity with the Risk Management Framework (RMF), compliance with security technical implementation guides (STIGs), and documentation of Plan of Action and Milestones (POA&M).

• Experience in managing SOC 2 Type II compliance audits.

• High level of personal integrity with the capability to handle sensitive, personal, and classified information discreetly.

• Exceptional communication skills, with the ability to collaborate effectively within a team and across the organization, while also independently driving initiatives.

• The company is unable to provide sponsorship for this position.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Opportunities for professional development and career advancement.

• Flexible work arrangements to promote work-life balance.