Information Security Compliance Analyst

This is a fully remote position, open to applicants in Minnesota.

📋 Description

• Assist in the administration, documentation, monitoring, and ongoing enhancement of information security compliance, governance, and risk management initiatives.

• Coordinate compliance efforts in line with NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, and other relevant standards.

• Maintain policies, standards, procedures, control matrices, ownership records, audit artifacts, evidence repositories, and compliance documentation.

• Engage in internal and external audits, assessments, and compliance evaluations.

• Assess the design and effectiveness of security controls; assist in control testing, reviews, findings, corrective actions, and remediation until closure.

• Monitor POA&Ms, corrective action strategies, security exceptions, compensating controls, and risk acceptance documentation.

• Aid in risk assessments, control gap analyses, risk register management, mitigation tracking, and the development of policies.

• Support vendor risk management, third-party security evaluations, and risk monitoring activities.

• Validate and gather evidence for security controls in AWS and Microsoft Azure environments.

• Collaborate with teams across Information Security, IT, Engineering, Product, Legal, Privacy, and other departments.

• Organize compliance projects, track milestones, deliverables, status updates, and assigned tasks.

• Investigate trends in cybersecurity, privacy, compliance, regulatory, and cloud security, providing recommendations for enhancements.

• Assist with security awareness programs, customer security questionnaires, due diligence requests, and ongoing monitoring.

• Travel for orientation, industry or company events, or onsite meetings as necessary.

• Carry out additional responsibilities as needed.

⛳️ Requirements

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or an equivalent combination of education and relevant experience.

• Demonstrated professional experience in information security, cybersecurity, compliance, audit, governance, risk management, information technology, or a related domain.

• Familiarity with NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, ISO 27001, or similar frameworks.

• Capability to evaluate security controls and support cloud compliance requirements within AWS and Microsoft Azure environments.

• Experience in compliance assessments, control testing, audit preparation, risk evaluations, gap analyses, continuous monitoring, or related GRC initiatives.

• Prior experience with GRC platforms, compliance management tools, vendor risk management, or third-party security assessments is preferred.

• Strong organizational, project management, analytical, investigative, research, problem-solving, and documentation skills.

• Proficient in coordinating cross-functional initiatives, influencing stakeholders, driving accountability, and managing remediation efforts.

• Excellent verbal, written, interpersonal, and stakeholder communication abilities.

• Experience in coordinating audits, compliance assessments, remediation actions, or governance initiatives across various stakeholders.

• Industry certifications such as Security+, SSCP, CGRC, CISA, CRISC, CCSK, AWS Security Specialty, Azure Security Engineer Associate, or similar credentials are preferred.

• Ability to handle proprietary and confidential information with discretion.

• Willingness to travel as needed, up to 10% of the time.

• Strong work ethic, integrity, collaboration, and team-oriented mindset.

🏝️ Benefits

• Annual base salary ranging from $80,000 to $100,000 USD.

• Bonus opportunities.

• Comprehensive benefits package.

• Additional perks.

• Contributions to community initiatives.

• Fully remote work arrangement.

• Equal opportunity workplace.

• Workplace accommodations available for applicants with disabilities.