Technical Compliance Analyst

Responsibilities Draft technically precise responses to RFPs, security questionnaires, and customer portals Own and continuously update the audit-ready repository of security evidence, technical configurations, and policy documents Retrieve technical evidence on AWS KMS encryption, logging pipelines, and IAM privilege escalation paths Partner with IT, Security, Product, Engineering, and Delivery on compliance-by-design architectural decisions Write, update, and operationalize security policies and translate SOC 2/NIST controls into developer-friendly tasks Automate policy enforcement in CI/CD pipelines Conduct compliance enablement sessions for engineering teams Coordinate end-to-end SOC 2 Type I and Type II audit cycles across business entities Manage audit schedules, external auditors, and remediation of findings Automate evidence collection and monitor technical controls using Vanta and Drata Manage the Jira compliance ticketing queue Execute quarterly User Access Reviews, security awareness training, phishing simulations, and Risk Acceptance/Exception processes Build and maintain compliance KPI/KRI dashboards and report audit readiness, remediation SLAs, and control health trends Manage annual policy review and attestation cycles Assist with alignment to

NIST SP 800-53

, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0 Draft early System Security Plans and Plans of Action & Milestones Own third-party vendor reviews for cloud, HRIS, and CRM providers Support security incidents by preserving evidence, documenting event chronology, and drafting post-incident reports Requirements 2–5 years of experience in technical compliance, IT audit, or GRC within a SaaS or fast-paced startup environment Proven end-to-end experience supporting external SOC 2 Type I and Type II audits Expertise auditing IT General Controls (ITGC), including Change Management, Logical Access, and System Operations Strong understanding of modern cloud infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management Ability to read a Terraform plan or an AWS Config rule and interpret its compliance impact Experience operating Vanta or Drata Experience tracking work in Jira Experience with KnowBe4 or a security awareness platform Exceptional written and verbal communication skills Ability to explain technical controls to customers and business risks to engineers Core Competencies Demonstrates expertise in technical compliance and IT audit processes, with a strong focus on SOC 2 Type I and Type II audits, cloud infrastructure compliance, and policy automation. Proficient in managing compliance documentation, conducting training sessions, and collaborating with cross-functional teams to ensure adherence to security standards. Highest-signal resume keywords SOC 2 Type I And Type II Audit Experience AWS KMS Encryption CI/CD Pipeline Automation Vanta Or Drata Experience Technical Compliance Management ATS Optimization Keywords Hard Skills Technical Compliance IT Audit GRC IAM Encryption Standards Vulnerability Management Terraform AWS Config Audit Readiness Security Policy Development Soft Skills Exceptional Written Communication Verbal Communication Collaboration Training Facilitation Problem-Solving Industry Keywords NIST SP 800-53 NIST SP 800-171 Rev 3 FedRAMP

CMMC 2.0

IT General Controls Tools & Technologies Jira Vanta Drata KnowBe4 Cloud Infrastructure #J-18808-Ljbffr Jobtailor