Overview

As a critical part of Origami Risk’s Information Security team, the Compliance Analyst supports IT compliance, risk management, and data governance activities across the business. This role has a high degree of direct impact, including designing, coordinating, and driving successful control implementation and ongoing audit activities across the business. As a consultative partner, the Compliance Analyst embeds across discrete business units to ensure compliance objectives are met throughout process, product development lifecycle, and service delivery. The ideal candidate will possess both a broad control framework understanding and the technical acumen to enable a hands-on approach in guiding security best practices across engineering teams.

Origami Risk is proud to be an equal opportunity employer. We thrive and benefit from diversity and are committed to creating an inclusive and equitable environment for all employees. We do not discriminate against any individual based upon race, religion, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, color, sex, national origin, age, marital status, military or veteran status, disability, or any other characteristic protected by applicable law.

Responsibilities

• Conduct compliance assessments of controls for in-scope systems, including remediation assessments and audit-readiness assessments• Partner with technical teams, advising both on applicable control requirements and potential solutions to address them• Identify control deficiencies and maintain records of deficiency details including management response documentation and exposure check evidence• Drive remediation activities with stakeholders, including developing remediation plans, tracking, and reporting remediation progress• Support evidence collection and documentation for internal and external audits• Perform continuous monitoring activities and track control health metrics• Develop and manage internal GRC initiatives• Stay up to date and proactively informed on developing regulatory concerns and evolving compliance control solutions

Qualifications

• Bachelor’s Degree Required• Demonstrated FedRAMP Ready/ATO, SOC 2, NIST 800-53, NIST CSF assessment experience• 5 years of work experience with at least 2 years in security, with demonstrated accomplishment in assessments and controls• Minimum two years of hands-on, practical experience in one or more security domains, e.g., Application, Cloud, Network• Project management experience

Who We AreOrigami Risk is a leading provider of integrated SaaS solutions for risk management, insurance, safety, and compliance. We've designed our single-platform, cloud-based software to be easily configurable to meet the needs of insured corporate and public entities, brokers and risk consultants, insurers and MGAs, third party claims administrators (TPAs), risk pools, and more. To fulfill our singular focus of helping our clients achieve their business objectives, our software is supported by a best-in-class service team of experienced risk, insurance, and safety professionals who have an ideal balance of industry knowledge and technological expertise.

Since its founding in 2009, Origami Risk has received more than two dozen awards for service excellence, technology innovation, and workplace culture. In addition to inclusion in Deloitte’s Technology Fast 500™, a ranking of the 500 fastest-growing tech companies in North America, Origami Risk also has been repeatedly recognized by Inc. magazine as one of the “Best Places to Work” and Best and Brightest® Companies To Work For in the Nation by the National Association for Business Resources (NABR).