ImageTrend, LLC. · Eagan, MN, United States
Under the direction of the Director, Information Security, the Information Security Compliance Analyst supports the execution, administration, and continuous improvement of ImageTrend’s cybersecurity compliance, governance, and risk management programs. This role is responsible for coordinating and maintaining security compliance programs aligned with frameworks and regulations including NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, and other contractual, customer, and regulatory requirements.
The Information Security Compliance Analyst partners with Information Security, IT, Engineering, Product, Legal, Privacy, and other business stakeholders to support audits, assessments, control documentation, risk management, and compliance initiatives. This role requires strong organizational, project management, analytical, investigative, research, problem-solving, and documentation skills, with the ability to manage multiple priorities, maintain audit-ready records, and meet deadlines. The candidate must demonstrate the ability to coordinate cross-functional initiatives, influence stakeholders, drive accountability, and successfully manage remediation efforts to completion while working independently and collaboratively in a fast-paced environment. Excellent verbal, written, interpersonal, and stakeholder communication skills, with strong attention to detail and a commitment to producing accurate, high-quality documentation are required. The candidate must also be able to maintain discretion when handling proprietary and confidential information. Strong work ethic, integrity, honesty, collaboration and team orientation are required. The candidate must be able to travel as required, up to 10%.
Required qualifications include a Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or the equivalent combination of education and relevant experience. Proven professional experience in information security, cybersecurity, compliance, audit, governance, risk management, information technology, or a related field, preferably within healthcare technology, SaaS, public sector, or cloud-native environments is required. Experience interpreting and applying information security frameworks, auditing principles, internal controls, compliance processes, and risk management practices, including experience or familiarity with NIST 800-53, FedRAMP, GovRAMP, HIPAA, SOC 2, ISO 27001, or similar frameworks is required. Demonstrated ability to evaluate security controls and support cloud compliance requirements within AWS and Microsoft Azure environments is required. Practical experience supporting compliance assessments, control testing, audit preparation, risk assessments, gap analyses, continuous monitoring activities, or related governance, risk, and compliance initiatives is required.
Preferred qualifications include experience utilizing Governance, Risk, and Compliance (GRC) platforms, compliance management tools, vendor risk management processes, or third-party security assessments. Industry certifications such as Security+, SSCP, CGRC (formerly CAP), CISA, CRISC, CCSK, AWS Security Specialty, Azure Security Engineer Associate, or similar credentials are preferred. Enthusiasm for learning and expanding knowledge or skills is preferred.