Senior Technical Compliance Analyst

Location: Overland Park, KS; Suwanee, GA; or Ashburn, VA (up to 15% travel to QTS data center locations)

About the role

The Senior Technical Compliance Analyst is an integral member of the QTS Security Risk & Compliance Team, reporting to the Manager, Information Security Compliance & Risk. QTS has adopted a risk-based approach to security risk and compliance. This role is responsible for implementing, monitoring, and continuously improving QTS’s security risk and compliance programs through the enterprise GRC program.

The ideal candidate possesses a growth mindset, strong analytical skills, and a natural ability to collaborate across diverse teams. They will play a key role in transforming compliance requirements into actionable controls, meaningful documentation, and scalable processes that strengthen QTS’s risk and compliance posture while enabling business objectives.

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls, and documentation into a cohesive governance structure that supports operational execution, continuous monitoring, and data-driven reporting on the effectiveness of QTS security and compliance programs.
• Provide visibility into program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Provide internal support for internal audits of the program as well as external audits of SOC1 & SOC2, ISO 27001 & ISO 22301, PCI DSS, FISMA/NIST 800-53, DoD CMMC, and HITRUST audit cycles by facilitating evidence collection, stakeholder engagement, and issue remediation.

Key Activities

• Compliance Program Execution: Partner with control owners to monitor reviews, scope coverage, and assessment of control effectiveness and completeness of internal documentation.
• Compliance Implementations: Facilitate the implementation, adoption, and continuous improvement of new and existing compliance frameworks, standards, and regulatory requirements, ensuring controls and documentation are effectively integrated into data center and corporate operations.
• Customer Compliance Support: Assist in responding to customer security, compliance, and risk inquiries by coordinating evidence requests, completing questionnaires, and audit requests.
• Security Risk Program: Coordinate with the risk team as issues are reported that require documentation or control updates to reduce risk through continual improvements.