Security Compliance Analyst

Job Summary

As a full-time remote Security Governance Risk & Compliance (GRC) Analyst, the successful candidate will manage compliance-related inquiries, lead efforts to achieve and maintain CMMC compliance, and support existing FedRAMP, SOC 2, and PCI DSS compliance initiatives.

Key responsibilities:

• Manage and implement complex controls frameworks for cloud infrastructure and SaaS services
• Design and develop automation solutions for evidence collection across cloud infrastructure and endpoints
• Conduct risk assessments and recommend remediation and risk mitigation strategies across business units

Required qualifications:

• Minimum of 5+ years of experience in information security, IT audit, or GRC roles
• Deep understanding of compliance frameworks such as CMMC, NIST 800-53, FedRAMP, and SOC 2
• Strong technical acumen with modern cloud technologies (AWS, GCP, Azure) and familiarity with GRC tools
• Experience in training and coaching teams on security and privacy practices
• Ability to work independently while maintaining efficiency in an agile team environment