Skip to content

Compliance Analyst VII

Seekless can write your résumé for this posting first.
Before you apply
LocationRaleigh, North Carolina, United States
Typefull-time
SenioritySenior
Experience6+ yrs
Company size10,000+ people
PostedOct 29, 2026 · 5d ago
Verified live11h ago
At a glanceSummarised by Seekless from the posting.
Advanced knowledge of PCI, NIST 800-53, NIST 800-171, NIST SP 800-154, or the Risk Management Framework (RMF)
Advanced understanding of networks, systems, data flows, and IT operations
Advanced experience with data security and privacy regulations and common security tools
Strong analytical and critical-thinking skills
Ability to prioritize multiple tasks and meet deadlines
Clear written and verbal communication skills, including translating technical concepts for non-technical audiences
Demonstrated ability to work collaboratively across teams and build effective working relationships
Advanced knowledge of industry security, regulatory, and legal compliance considerations
Ability to develop and maintain security policies, standards, and other related legal standards
Expert experience with at least six security frameworks such as SOC 2, ISO, NIST, COSO, COBIT, PCI, or CIS
Bachelor's degree in Information Security, Computer Science, Information Systems, Business, or a related field; or equivalent experience
CISSP certification
IT security or corporate audit work experience — 6+ years
IT experience working in one or more domains (Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security) — 6+ years
Experience supporting or coordinating internal and external cybersecurity audits, including evidence collection, control testing, remediation tracking, and audit readiness
Experience with security compliance in cloud, managed services, healthcare, financial services, or other technology environments
Familiarity with HITRUST, HIPAA, GDPR, ISO 27001, and customer-facing security assurance requirements
Experience with ServiceNow, GRC platforms, audit/evidence management tools, or compliance automation platforms
Experience in professional services, consulting, or customer-facing compliance and due diligence activities
Additional relevant certifications such as CISM, CRISC, Security+, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor
This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future
Skills
PCI
NIST 800-53
NIST 800-171
NIST SP 800-154
Risk Management Framework (RMF)
SOC 2
ISO
COSO
COBIT
CIS
ServiceNow
GRC platforms
audit/evidence management tools
compliance automation platforms
This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.
About the company
At RapidScale, exceptional technology is powered by exceptional people. We deliver secure, reliable managed and advisory services across private, public, and hybrid clouds, helping organizations innovate, adapt, and grow. As an Elite Broadcom VMware VCSP Partner and top partner with AWS, Azure, and Google, our solutions focus on business outcomes, with embedded cyber resiliency and AI to protect today and enable tomorrow, all backed by the scale and strength of Spectrum.
About the role
The Compliance Analyst VII supports RapidScale’s information security and regulatory compliance efforts within its Governance, Risk, and Compliance (GRC) program. The role supports cybersecurity audit activities, control assessments, evidence collection, documentation, and remediation efforts against standards such as PCI, NIST, CIS Controls, and internal policies. Working closely with technical and business teams, control owners, auditors, and customer-facing partners, this position helps translate security requirements into clear, practical expectations and strengthen ongoing audit readiness and control effectiveness.
Major Duties and Responsibilities
•
Establish an advisory and effective challenge model to facilitate information security discussions, identify risks and control gaps, and provide insights that support strategic, risk-based decision-making.
•
Support PCI, CMMC, and other regulatory and compliance efforts, including audit planning and coordination, evidence collection, control reviews, auditor requests, and compliance responses. Recommend process enhancements to improve compliance effectiveness and audit readiness.
•
Evaluate, test, and document PCI, NIST, and other security best-practice controls; assess control design and operating effectiveness; identify gaps; and support remediation plans, issue tracking, and validation of corrective actions.
•
Recommend, develop, and maintain security policies, standards, procedures, guidance, control documentation, and related compliance records to support alignment with corporate requirements.
•
Interpret and explain security policies, standards, and regulatory requirements to technical and non-technical stakeholders. Collaborate with control owners, IT, and business teams to establish practical compliance expectations and improve understanding of security best practices.
•
Support ongoing compliance monitoring, audit evidence tracking, reporting of findings and remediation status, and preparation of compliance metrics and updates for relevant stakeholders.
•
Support customer compliance inquiries, due diligence, and assurance requests in coordination with internal teams.
•
Conduct research using authoritative security sources, vendor documentation, and industry best practices to inform compliance advice and recommended control improvements.
•
Partner with Security Awareness and other teams on training, communications, and articles related to security policies, standards, and compliance obligations.
Required Qualifications
Required Skills/Abilities and Knowledge
•
Advanced knowledge of PCI, NIST 800-53, NIST 800-171, NIST SP 800-154, or the Risk Management Framework (RMF).
•
Advanced understanding of networks, systems, data flows, and IT operations.
•
Advanced experience with data security and privacy regulations and common security tools.
•
Strong analytical and critical-thinking skills.
•
Ability to prioritize multiple tasks and meet deadlines.
•
Clear written and verbal communication skills, including translating technical concepts for non-technical audiences.
•
Demonstrated ability to work collaboratively across teams and build effective working relationships.
•
Advanced knowledge of industry security, regulatory, and legal compliance considerations.
•
Ability to develop and maintain security policies, standards, and other related legal standards.
•
Expert experience with at least six security frameworks such as SOC 2, ISO, NIST, COSO, COBIT, PCI, or CIS.
Required Education
•
Bachelor’s degree in Information Security, Computer Science, Information Systems, Business, or a related field; or equivalent experience. Applicants without a degree but with relevant work experience and/or training will be considered.
•
CISSP certification.
Required Related Work Experience
•
IT security or corporate audit work experience — 6+ years.
•
IT experience working in one or more domains (Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security) — 6+ years.
Preferred Qualifications
•
Experience supporting or coordinating internal and external cybersecurity audits, including evidence collection, control testing, remediation tracking, and audit readiness.
•
Experience with security compliance in cloud, managed services, healthcare, financial services, or other technology environments.
•
Familiarity with HITRUST, HIPAA, GDPR, ISO 27001, and customer-facing security assurance requirements.
•
Experience with ServiceNow, GRC platforms, audit/evidence management tools, or compliance automation platforms.
•
Experience in professional services, consulting, or customer-facing compliance and due diligence activities.
•
Additional relevant certifications such as CISM, CRISC, Security+, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.
Benefits
Here, our employees don’t just have jobs, they’re building careers. That’s why we offer a comprehensive pay and benefits package that rewards employees for their contributions to our success, supporting all aspects of their well-being at every stage of life.
A qualified applicant’s criminal history, if any, will be considered in a manner consistent with applicable laws, including local ordinances.