Senior Technical Compliance Analyst

Senior Technical Compliance Analyst

As a global leader in digital infrastructure, QTS designs, builds and operates advanced data centers that support strategic AI, cloud and digital transformation initiatives. We are driven by a mission to connect the world for good and our people make it possible. Every single day, the creativity, dedication and genuine care for our communities are what push us forward and make this a truly special place to be.

The Senior Technical Compliance Analyst is an integral team member of the QTS Security Risk & Compliance Team and reports to the Manager, Information Security Compliance & Risk. QTS has adopted a risk-based approach to security risk and compliance, and this role is responsible for implementing, monitoring, and continuously improving QTS's security risk and compliance programs through the enterprise GRC program. This role may be based in Overland Park, KS; Suwanee, GA; or Ashburn, VA and requires up to 15% travel to QTS data center locations. The ideal candidate possesses a growth mindset, strong analytical skills, and a natural ability to collaborate across diverse teams. They will play a key role in transforming compliance requirements into actionable controls, meaningful documentation, and scalable processes that strengthen QTS's risk and compliance posture while enabling business objectives.

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls and documentation into a cohesive governance structure that supports operational execution, continuous monitoring, and data driven reporting on the effectiveness of QTS security and compliance programs.
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Provide internal support for internal audits of the program as well as the external audits of the SOC1 & SOC2, ISO 27001 & ISO 22301, PCI DSS, FISMA / NIST 800-53, DOD CMMC, and HITRUST audit cycles, by facilitating evidence collection, stakeholder engagement, and issue remediation.
• Key Activities include:
• Compliance Program Execution – Partner with control owners to monitor reviews, scope coverage, and assessment of control effectiveness and completeness of internal documentation.
• Compliance Implementations – Facilitate the implementation, adoption, and continuous improvement of new and existing compliance frameworks, standards, and regulatory requirements, ensuring controls and documentation are effectively integrated into data center and corporate operations.
• Customer Compliance Support – Assist in responding to customer security, compliance, and risk inquiries by coordinating evidence requests, completing questionnaires, and audit requests.
• Security Risk Program – Coordinate with the risk team as issues are reported that require documentation or control updates to reduce risk through continual improvements.

Bachelor's degree or equivalent professional experience.

Minimum of 2 years of experience supporting compliance, risk management, governance, or a related operational function.

Hands-on experience administering, implementing, or utilizing Governance, Risk, and Compliance (GRC) or Integrated Risk Management (IRM) platforms.

Written skills to demonstrate ability to translate complex requirements in a clear, concise manner in communications and documentation.

Strong analytical, organizational, and problem-solving skills, with the ability to manage multiple priorities and deadlines in a fast-paced environment.

Proven ability to build and maintain collaborative relationships across a diverse group of stakeholders, including technology teams, operational teams, auditors, and corporate support functions.

Preferred Knowledge & Experience

Working knowledge of one or more of the following frameworks, standards, and regulatory requirements:

• HITRUST
• SOC 1
• SOC 2
• PCI DSS
• ISO 27001
• ISO 22301
• FISMA / NIST 800-53
• NIST Cybersecurity Framework (CSF)
• DoD Cybersecurity Maturity Model Certification (CMMC)

Additional Qualifications

The ideal candidate may hold, or be actively pursuing, one or more of the following certifications:

• Certified Information Systems Security Professional (CISSP)
• GIAC Security Essentials Certification (GSEC)
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)
• GIAC Critical Controls Certification (GCCC)

Knowledge, Skills, and Abilities

In addition to QTS Core Values, the successful candidate will demonstrate:

• Quality Decision Making – Strong analytical skills to evaluate risks, assess control solutions, and synthesize diverse inputs from cross-functional stakeholders.
• Consultative Communication – Builds trusted relationships and effectively communicates with technical and non-technical stakeholders to achieve compliance and risk management objectives.
• Team Collaboration – Establishes and maintains positive working relationships across business functions, management teams, and risk/compliance stakeholders. Adapts to diverse perspectives and works collaboratively to drive continuous improvement and program success.
• Technical Aptitude – Demonstrates curiosity and a commitment to professional growth by continuously expanding knowledge of compliance, risk, regulatory requirements, and enabling technologies. Quickly adapts to evolving tools, processes, and business needs.

In addition to a variety of benefit packages, QTS goes above and beyond for our employees:

• Roth and Traditional 401(k) matching contributions with immediate vesting
• Every employee is bonus or commission eligible
• Generous PTO, Paid Volunteer Days Plus Floating Holidays
• Stock Purchase Plan (SPP)
• 11 paid Holidays Annually/Holiday compensation when worked
• Pet and Legal Insurance
• Q-Rest Sabbatical Program
• Q-Anniversary Service Award Program
• Parental Leave
• Military Benefits Package
• QTS Charitable Matching Gift Program
• QTS Scholarship for Employee Dependents
• QTS Crisis Fund
• Wellness Program
• Tuition Reimbursement Program

QTS is an Equal Opportunity Employer. We conform to all the laws, statutes, and regulations concerning equal employment opportunities and affirmative action. We strongly encourage women, minorities, individuals with disabilities and veterans to apply to all of our job openings. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, or national origin, age, disability status, Genetic Information & Testing, Family & Medical Leave, protected veteran status, or any other characteristic protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer or the government, or against any individuals who assist or participate in the investigation of any complaint or discrimination claim.