Senior Technical Compliance Analyst

Overview

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure.
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Provide internal support for internal audits and external audits of SOC1 & SOC2, ISO 27001 & ISO 22301, PCI DSS, FISMA / NIST 800-53, DOD CMMC, and HITRUST audit cycles.
• Facilitate evidence collection, stakeholder engagement, and issue remediation.
• Partner with control owners to monitor reviews, scope coverage, and assessment on control effectiveness and completeness of internal documentation.
• Facilitate the implementation, adoption, and continuous improvement of new and existing compliance frameworks, standards, and regulatory requirements.
• Assist in responding to customer security, compliance, and risk inquiries by coordinating evidence requests, completing questionnaires, and audit requests.
• Coordinate with the risk team as issues are reported that require documentation or control updates to reduce risk through continual improvements.

Requirements

• Bachelor's degree or equivalent professional experience.
• Minimum of 2 years of experience supporting compliance, risk management, governance, or a related operational function.
• Hands-on experience administering, implementing, or utilizing Governance, Risk, and Compliance (GRC) or Integrated Risk Management (IRM) platforms.
• Written skills to demonstrate ability to translate complex requirements in a clear, concise manner in communications and documentation.
• Strong analytical, organizational, and problem-solving skills, with the ability to manage multiple priorities and deadlines in a fast-paced environment.
• Proven ability to build and maintain collaborative relationships across a diverse group of stakeholders, including technology teams, operational teams, auditors, and corporate support functions.

Preferred Knowledge & Experience

• Working knowledge of one or more of the following frameworks, standards, and regulatory requirements: HITRUST, SOC 1, SOC 2, PCI DSS, ISO 27001, ISO 22301, FISMA / NIST 800-53, NIST Cybersecurity Framework (CSF), DoD Cybersecurity Maturity Model Certification (CMMC).

Additional Qualifications

• The ideal candidate may hold, or be actively pursuing, one or more of the following certifications: CISSP, GSEC, CISA, CRISC, GCCC.

Knowledge, Skills, and Abilities

• Quality Decision Making: Strong analytical skills to evaluate risks, assess control solutions, and synthesize diverse inputs from cross-functional stakeholders.
• Consultative Communication: Builds trusted relationships and effectively communicates with technical and non-technical stakeholders.
• Team Collaboration: Establishes and maintains positive working relationships across business functions, management teams, and risk/compliance stakeholders.
• Technical Aptitude: Demonstrates curiosity and a commitment to professional growth by continuously expanding knowledge of compliance, risk, regulatory requirements, and enabling technologies.

Benefits

• Roth and Traditional 401(k) matching contributions with immediate vesting.
• Every employee is bonus or commission eligible.
• Generous PTO, Paid Volunteer Days Plus Floating Holidays.
• Stock Purchase Plan (SPP).
• 11 paid Holidays Annually/Holiday compensation when worked.
• Pet and Legal Insurance.
• Q-Rest Sabbatical Program.
• Q-Anniversary Service Award Program.
• Parental Leave.
• Military Benefits Package.
• QTS Charitable Matching Gift Program.
• QTS Scholarship for Employee Dependents.