Compliance Analyst II

Waystar•Louisville, KY

2d•Remote

About The Position

The Compliance Analyst II plays a key role in supporting and coordinating Waystar's information technology compliance and assurance programs. This position is responsible for managing day-to-day activities related to regulatory and industry assessments, including HITRUST, PCI DSS, SOC 2 / 3 + HIPAA, and TX-RAMP. The Compliance Analyst II serves as a primary liaison between internal stakeholders and external auditors, helping ensure successful completion of assessments and maintaining audit readiness throughout the year. This role requires strong organizational skills, attention to detail, project management capabilities, and the ability to work effectively with technical and non-technical teams across the organization. The Compliance Analyst II is expected to independently manage assigned assessments from planning through completion while supporting broader compliance initiatives as directed by the Manager, IT Compliance.

Requirements

Bachelor's degree in Information Systems, Cybersecurity, Business, Risk Management, Compliance, Accounting, or a related field; or equivalent combination of education and experience.
2+ years of experience in information technology compliance, audit, risk management, cybersecurity, or a related discipline.
Experience supporting one or more compliance frameworks including HITRUST, PCI DSS, SOC 2 / 3, HIPAA, TX-RAMP, NIST, or similar regulatory frameworks.
Experience coordinating audits and working directly with external assessors or auditors.
Experience managing multiple concurrent projects and competing priorities.

Nice To Haves

Experience managing compliance assessments from planning through final reporting.
Knowledge of healthcare regulatory requirements and HIPAA security and privacy requirements.
Experience using Governance, Risk, and Compliance (GRC) platforms or audit management tools.
Familiarity with cloud environments, information security controls, and third-party risk management.
Relevant certifications such as: HITRUST CCSFP CISA CRISC CISSP CIPP/US PCI ISA

Responsibilities

Coordinate and manage assigned compliance assessments and audits, including HITRUST, PCI DSS, SOC 2 / 3 + HIPAA, and TX-RAMP.
Develop and maintain assessment project plans, timelines, request trackers, and status reporting.
Facilitate audit planning activities, kick-off meetings, stakeholder interviews, walkthroughs, and evidence collection efforts.
Assign audit requests to appropriate control owners and monitor progress through completion.
Serve as a primary point of contact for internal teams and external auditors during assessments.
Maintain ongoing communication with stakeholders regarding audit requirements, deadlines, risks, and remediation efforts.
Monitor assessment status and escalate issues or delays when necessary.
Maintain an audit-ready compliance posture by collecting, organizing, and maintaining evidence throughout the year.
Develop, review, and update compliance documentation, procedures, narratives, inventories, and process flows.
Assist with the development and maintenance of policies, standards, and supporting compliance documentation.
Support continuous monitoring activities designed to maintain compliance with organizational and regulatory requirements.
Partner with Information Security, Infrastructure, Engineering, Product Development, Legal, Privacy, Human Resources, Procurement, and other business units to support compliance initiatives.
Facilitate meetings and communications between internal stakeholders and external assessors.
Assist process owners in understanding audit requirements and evidence expectations.
Support remediation efforts by tracking corrective actions and validating completion of assigned tasks.
Manage and respond to requests submitted through the Compliance team inbox.
Track and maintain compliance metrics, assessment schedules, documentation inventories, and ongoing compliance activities.
Support responses to customer and regulatory inquiries related to compliance certifications and attestations.
Participate in internal process improvement initiatives that increase efficiency and strengthen compliance programs.
Stay current on emerging regulatory requirements, industry frameworks, and compliance best practices.
Contribute to special projects and strategic initiatives assigned by the Manager, IT Compliance.
Perform other duties as assigned.

Benefits

Competitive total rewards (base salary + bonus, if applicable)
Customizable benefits package (3 medical plans with Health Saving Account company match)
Generous paid time off for non-exempt team members, starting with 3 weeks + 13 paid holidays, including 2 personal floating holidays.
Flexible time off for exempt team members + 13 paid holidays
Paid parental leave (including maternity + paternity leave)
Education assistance opportunities and free LinkedIn Learning access
Free mental health and family planning programs, including adoption assistance and fertility support
401(K) program with company match
Pet insurance
Employee resource groups