Senior Technical Compliance Analyst
On-siteAshburn, Virginia, United States or Overland Park, Kansas, United States
Job Summary
Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure supporting operational execution and data-driven reporting. Provide visibility into program maturity and control effectiveness through dashboards while facilitating evidence collection, stakeholder engagement, and issue remediation for internal and external audits including SOC1, SOC2, ISO 27001, PCI DSS, and HITRUST cycles. Partner with control owners to monitor reviews, scope coverage, and assessment on control effectiveness, and assist in responding to customer security inquiries by coordinating evidence requests and completing questionnaires. Coordinate with the risk team on reported issues requiring documentation or control updates to reduce risk through continual improvements.
Required Qualifications
- Bachelor's degree or equivalent professional experience
- Minimum of 2 years of experience supporting compliance, risk management, governance, or a related operational function
- Hands-on experience administering, implementing, or utilizing Governance, Risk, and Compliance (GRC) or Integrated Risk Management (IRM) platforms
- Written skills to demonstrate ability to translate complex requirements in a clear, concise manner in communications and documentation
- Strong analytical, organizational, and problem-solving skills, with the ability to manage multiple priorities and deadlines in a fast-paced environment
- Proven ability to build and maintain collaborative relationships across a diverse group of stakeholders, including technology teams, operational teams, auditors, and corporate support functions
- Quality Decision Making – Strong analytical skills to evaluate risks, assess control solutions, and synthesize diverse inputs from cross-functional stakeholders
- Consultative Communication – Builds trusted relationships and effectively communicates with technical and non-technical stakeholders to achieve compliance and risk management objectives
- Team Collaboration – Establishes and maintains positive working relationships across business functions, management teams, and risk/compliance stakeholders
- Technical Aptitude – Demonstrates curiosity and a commitment to professional growth by continuously expanding knowledge of compliance, risk, regulatory requirements, and enabling technologies
- Working knowledge of one or more of the following frameworks, standards, and regulatory requirements: HITRUST SOC 1 SOC 2 PCI DSS ISO 27001 ISO 22301 FISMA / NIST 800-53 NIST Cybersecurity Framework (CSF) DoD Cybersecurity Maturity Model Certification (CMMC)
- Certified Information Systems Security Professional (CISSP)
- GIAC Security Essentials Certification (GSEC)
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- GIAC Critical Controls Certification (GCCC)
- Must be based in Overland Park, KS; Suwanee, GA; or Ashburn, VA
- Requires up to 15% travel to QTS data center locations
Desired Qualifications
- The ideal candidate possesses a growth mindset
- Strong analytical skills
- A natural ability to collaborate across diverse teams
- Ability to transform compliance requirements into actionable controls, meaningful documentation, and scalable processes
- The ideal candidate may hold, or be actively pursuing, one or more of the following certifications: Certified Information Systems Security Professional (CISSP) GIAC Security Essentials Certification (GSEC) Certified Information Systems Auditor (CISA) Certified in Risk and Information Systems Control (CRISC) GIAC Critical Controls Certification (GCCC)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.