IT Compliance Analyst

About the role

QCi is seeking an experienced IT compliance analyst to ensure the processes and associated controls for the compliance frameworks are designed, managed, and assessed for effectiveness to reduce overall compliance risk across the organization.

Responsibilities

• Assess, document, and report on existing security / privacy controls, risks & exceptions in support of regulatory compliance frameworks.
• Coincide with control owners, systems owners, and business owners to address control weaknesses and noncompliance.
• Audit Support – Scoping audits, scheduling activities, leading calls, coordinating and fulfilling document request lists, leading walkthroughs, and other audit tasks as appropriate.
• Vendor Risk Assessments – Conduct and manage vendor security assessments by evaluating third-party controls, reviewing audit reports (e.g., CMMC, SOC 2, ISO/IEC 27001), identifying risks, and ensuring compliance with applicable data protection regulations (e.g., GDPR, HIPAA).
• Security policies and procedures – Establish best practices, standards, and compliance guidelines. Assist in the development and implementation of security policies and procedures.
• Customer Security Questionnaires – Respond to customer security questionnaires by gathering and validating control evidence, clearly communicating security practices, and ensuring alignment with frameworks such as CMMC, SOC 2 and ISO/IEC 27001 while meeting client and regulatory requirements.
• Collaborate with Development and IT teams – Assist in the evaluation, testing, and assurance criteria for security architectures and designs, Assist in the analysis of new and existing security technologies, policies, and processes.
• Align Security Controls with Compliance Requirements – map internal policies and technical safeguards to frameworks such as SOX, CMMC, SOC 2 and ISO/IEC 27001, identifying gaps, and driving remediation efforts to ensure ongoing regulatory and audit readiness.

Requirements

• 5+ years of experience as an IT / Security Compliance Analyst
• In-depth knowledge and hands on experience with GRC tools
• Experience working with multiple security frameworks such as SOX, CMMC, NIST, SOC, & ISO 27001
• Proficiency designing, implementing and monitoring secure controls
• Extensive audit and continuous monitoring experience
• Advanced knowledge of network, system, and application security controls
• Strong verbal and written communication skills

Preferred Qualifications

• 7+ years of experience as an IT security compliance analyst
• In depth knowledge of NIST 800-171 security controls and associated processes, architectures and tooling support
• In depth experience with configuring and automating GRC tooling
• Prior proven experience with leading IT security audits

Qualifications

• 5+ years of experience as an IT / Security Compliance Analyst
• In-depth knowledge and hands on experience with GRC tools
• Experience working with multiple security frameworks such as SOX, CMMC, NIST, SOC, & ISO 27001
• Proficiency designing, implementing and monitoring secure controls
• Extensive audit and continuous monitoring experience
• Advanced knowledge of network, system, and application security controls
• Strong verbal and written communication skills

Benefits

Quantum Computing Inc. (QCi) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Pay

TBD

Schedule

TBD