Senior IT Compliance Analyst

About the Role

The Senior IT Compliance Analyst owns the compliance and security posture of Supersure’s technology systems, data practices, and technical infrastructure. This role bridges IT and compliance, providing expert guidance on SOC 2 controls, Vanta platform management, data governance, and technology-related regulatory risk.

• Own control design, documentation, and evidence collection for SOC 2 Type II audit
• Coordinate with Engineering and Product on control implementation and testing
• Prepare audit readiness materials and manage audit relationships
• Support continuous improvement of controls

• Serve as operational owner of Vanta across all portfolio companies
• Manage Vanta work spaces, integrations, and continuous monitoring configuration
• Triage and respond to Vanta alerts and control gaps
• Maintain audit-ready evidence and documentation

• Lead data governance initiatives including data classification and access controls
• Conduct privacy impact assessments for new products
• Ensure alignment with HIPAA and data privacy requirements

• Evaluate technology vendors for compliance and security posture
• Assess integration risks for new tools and platforms

• Coordinate and support internal and external IT audits
• Prepare evidence and documentation for audit reviews
• Drive remediation of audit findings

• Partner with IT Security on vulnerability assessment and remediation as needed
• Serve as SME on technology compliance for product launches
• Train business department teams on technology compliance, data handling, and data privacy, in collaboration with the Chief Compliance Officer

• 4+ years in IT compliance, cybersecurity compliance, or IT risk management
• Demonstrated knowledge of HIPAA technical safeguards, SOC 2 Trust Service Criteria, data privacy frameworks
• Experience conducting IT audits, risk assessments, and vendor security reviews
• Strong analytical and problem-solving skills
• Effective communication skills including presenting to non-technical stakeholders

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field
• Professional certifications (CISA, CISSP, CIPP, CRISC)
• Experience with GRC platforms or continuous monitoring tools such as Vanta
• Experience in insurance, healthcare, financial services, or other regulated industry IT environments
• Familiarity with NIST CSF, NIST AI RMF, or similar frameworks
• Experience with AI/ML governance

• Free medical coverage and comprehensive dental & vision insurance for you and your dependents
• An HSA with employer dollars to help you save
• Mental health resources for life’s tougher moments
• Company-paid life insurance and short-term disability
• Company-paid parking on-site or train pass (Miami)
• $60/month cell phone stipend
• 401(k) dollar-for-dollar company match up to 4% with 100% immediate vesting
• A team that genuinely enjoys spending time together — backed by free snacks, drinks, and events that people still talk about long after they happen
• Competitive paid time off, to recharge, so you can show up as your best self
• 12 paid holidays to recharge, plus a floating holiday to spend however you see fit

If you’re looking for a place where your ideas shape the future, and your career can grow as fast as you want. Don’t just get a job. Get a seat at the table where the future of insurance and benefits is being built.