Information Security Compliance Analyst

🔥 7 minutes ago

❄️ Minnesota – Remote

❄️ Minnesota – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Data Recognition Corporation

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1978

📚 Education

🤝 B2B

☁️ SaaS

Education • B2B • SaaS

Data Recognition Corporation (DRC) is a provider of assessment, testing, and data services for education, licensure & certification, government and commercial clients. DRC designs and delivers large-scale, high‑stakes and formative assessments and associated services — including test development, online testing platforms (e. g. , DRC BEACON, IDEAS), psychometrics, security and enhanced reporting. Their product portfolio includes K–12 and adult assessment brands (TerraNova, LAS Links, TABE), licensure and certification exam services, survey and document solutions, federal and commercial research, and HR/employee-engagement assessments. DRC emphasizes data security, ISO certifications, and interoperability standards (IMS QTI).

📋 Description

• Obtain and maintain GovRAMP compliance • Support Authority to Operate (ATO) approvals for government contracts by adhering to the NIST Risk Management Framework (RMF) • Develop and manage System Security Plan (SSP) documentation and Plans of Action and Milestones (POAMs) • Assess and audit system security controls and perform continuous monitoring activities • Manage internal and external annual audits, including third-party and customer audits • Maintain and drive remediation of POAM items • Develop and review security policies and standards • Mature security risk management practices • Manage and enhance Business Continuity/Disaster Recovery processes • Update and maintain security and compliance metrics • Assist with security awareness and other aspects of the security practice • Promote business continuity and resiliency efforts • Work with no direct reports; other duties may be assigned by the employer

🎯 Requirements

• 3+ years of Information Security, GRC, audit, or compliance experience • Working knowledge of NIST 800-53 Rev 5 framework and how to implement and audit against the framework • General knowledge of the Risk Management Framework (RMF), compliance with security technical implementation guides (STIGs), and documenting Plan of Action and Milestones (POA&M) • Experience managing SOC 2 Type II compliance audits • High level of personal integrity and ability to discreetly handle sensitive, personal, and classified information • Excellent communication skills and ability to work well in a team and across the organization, as well as independently driving initiatives • Company cannot provide sponsorship for this position