Senior Technical Compliance Analyst

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure
• Support operational execution, continuous monitoring, and data-driven reporting on QTS security and compliance programs
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards
• Support internal audits and external audits for SOC 1, SOC 2, ISO 27001, ISO 22301, PCI DSS, FISMA/NIST 800-53, DoD CMMC, and HITRUST
• Facilitate evidence collection, stakeholder engagement, and issue remediation
• Partner with control owners to monitor reviews, scope coverage, and control effectiveness and documentation completeness
• Facilitate implementation, adoption, and continuous improvement of compliance frameworks, standards, and regulatory requirements
• Integrate controls and documentation into data center and corporate operations
• Coordinate responses to customer security, compliance, and risk inquiries, evidence requests, questionnaires, and audit requests
• Coordinate with the risk team on issues requiring documentation or control updates to reduce risk

• Bachelor’s degree or equivalent professional experience
• Minimum of 2 years of experience supporting compliance, risk management, governance, or a related operational function
• Hands-on experience administering, implementing, or utilizing Governance, Risk, and Compliance (GRC) or Integrated Risk Management (IRM) platforms
• Ability to translate complex requirements clearly and concisely in communications and documentation
• Strong analytical, organizational, and problem-solving skills
• Ability to manage multiple priorities and deadlines in a fast-paced environment
• Ability to build and maintain collaborative relationships across technology teams, operational teams, auditors, and corporate support functions
• Working knowledge of one or more of HITRUST, SOC 1, SOC 2, PCI DSS, ISO 27001, ISO 22301, FISMA/NIST 800-53, NIST Cybersecurity Framework, or DoD CMMC
• CISSP, GSEC, CISA, CRISC, or GCCC certification held or actively pursued is a potential qualification
• Up to 15% travel to QTS data center locations

Demonstrates expertise in Governance, Risk, and Compliance (GRC) frameworks, with a strong focus on compliance program execution, risk management, and regulatory requirements. Proficient in analytical reporting and stakeholder engagement to enhance program maturity and control effectiveness.

• Governance, Risk, And Compliance (GRC)
• Compliance Program Execution
• Risk Management
• SOC 1, SOC 2, ISO 27001, PCI DSS
• Analytical Reporting

• Governance, Risk, And Compliance (GRC)
• Integrated Risk Management (IRM)
• Compliance Frameworks
• Risk Assessment
• Data-Driven Reporting
• Control Effectiveness Monitoring
• Evidence Collection
• Stakeholder Engagement
• Issue Remediation
• Documentation Management

• Analytical Skills
• Organizational Skills
• Problem-Solving Skills
• Communication Skills
• Collaboration Skills

• CISSP
• GSEC
• CISA
• CRISC
• GCCC

• ISO 22301
• FISMA/NIST 800-53
• DoD CMMC
• HITRUST
• NIST Cybersecurity Framework