Offer summary

Qualifications:

4–6 years of experience in audit, compliance, or risk management focused on IT security., In-depth knowledge of frameworks like SOC 1/2, HITRUST, and ISO 27001., Industry certifications such as CISA or ISO Lead Implementer are highly desirable., Strong communication skills and familiarity with IT infrastructure are essential..

Key responsibilities:

Conduct in-depth security and privacy risk assessments to ensure data integrity and availability.

Evaluate third-party risks by assessing threats and vulnerabilities.

Develop and maintain information security and privacy policies to safeguard digital assets.

Manage the Governance, Risk, and Compliance (GRC) platform and provide training on secure development practices.

Job description

JOB TITLE: IT Compliance Analyst

LOCATION: Remote

TYPE: Remote

SCHEDULE: Monday to Friday

TYPE OF CONTRACT: Contractor

JOB DESCRIPTION:

Are you ready to unlock your potential as an IT Compliance Analyst? Join a dynamic team in a fully remote capacity, where your role is central to upholding the integrity, security, and compliance of critical information assets. This contract-based opportunity is ideal for a self-driven professional with a passion for information security and risk management.

You will operate with minimal supervision while playing a key part in risk assessment initiatives, policy development, and compliance frameworks across the organization. This role supports inclusive work environments and offers reasonable accommodations for qualified individuals with disabilities.

RESPONSIBILITIES:

Perform in-depth security and privacy risk assessments, ensuring secure authentication, authorization, integrity, and availability of data.
Participate in third-party risk assessments by evaluating threats, vulnerabilities, and potential consequences to the business.
Develop, implement, and maintain information security and privacy policies to protect intellectual property and digital assets.
Manage the Governance, Risk, and Compliance (GRC) platform and establish robust monitoring and reporting mechanisms.
Assist with maintaining enterprise certifications including ISO 27001, ISO 27701, SOC 2, and PCI DSS.
Provide training to technical teams on secure development practices and regulatory compliance requirements.

REQUIREMENTS:

4–6 years of professional experience in audit, compliance, or risk management with a focus on IT security.
In-depth knowledge of frameworks and standards including SOC 1/2, HITRUST, FedRAMP, PCI, ISO 27001, and NIST CSF.
Industry certifications such as CISA, ISO Lead Implementer, or ISO Lead Auditor are highly desirable.
Strong written and verbal communication skills to engage stakeholders and articulate technical requirements.
Sound mathematical and analytical skills for accurate problem-solving.
Familiarity with IT infrastructure, enterprise applications, and administration tools.

ttg Talent Solutions is an Equal Opportunity Employer and recruiting agency. We are committed to creating an inclusive and diverse work environment and welcome applications from all qualified candidates regardless of race, color, religion, gender, sexual orientation, national origin, age, disability, or veteran status. Please note that all offers of employment are contingent upon the successful completion of a drug test and background check. We maintain a drug- and substance-free workplace to ensure the safety and well-being of all employees.

At ttg, “We believe in making a difference One Person at a Time,” ttg OPT.

Required profile