Data Center Compliance Analyst

Rowan Digital Infrastructure • Denver, CO

1d • $90,000 - $105,000 • Hybrid

About The Position

Rowan Digital Infrastructure is seeking a Compliance Analyst to provide operational support for its second-line Governance, Risk, and Compliance (GRC) program across SOC 2, ISO 27001, and PCI DSS. The Senior Associate-level role keeps compliance activities continuously managed by coordinating evidence collection, monitoring control performance, supporting audits, tracking remediation, facilitating risk assessments, and running the ISO 27001 internal audit program. The analyst works with Data Center Operations, IT, Information Security, Facilities, Physical Security, Legal, and other stakeholders to maintain year-round audit readiness while allowing operational teams to focus on running the business. The role reports to the SOC Compliance Manager.

The position is based in Temple, Texas, or Denver, Colorado, and has a three-day hybrid in-office/on-site schedule. Travel of 25–50% may be required depending on project needs. Compensation is $90,000–$105,000, with bonus eligibility.

Requirements

• Bachelor’s degree in Information Security, Information Systems, Cybersecurity, Risk Management, Business Administration, Accounting, Audit, or a related discipline.
• At least 3 years of experience in compliance, risk management, internal audit, information security, or governance-related roles.
• Experience supporting SOC 1 or SOC 2, ISO 27001, or PCI DSS 4.0, including work with external auditors, assessors, or certification bodies.
• Understanding of IT general, information security, and operational controls.
• Experience performing risk assessments and tracking remediation.
• Strong analytical, organizational, and project management skills, with high attention to detail.
• Excellent written and verbal communication skills and the ability to influence stakeholders and drive accountability across multiple departments.
• Ability to travel 25–50% depending on project needs.

Nice To Haves

• Experience in a colocation, hyperscale, cloud, managed services, or enterprise data center environment, with familiarity with physical security and environmental controls.
• Experience with GRC platforms such as Vanta, Drata, or Workiva.
• Knowledge of ITIL, NIST 800-53, NIST CSF, or CIS Controls.
• Certifications such as CISA, CISSP, CRISC, ISO/IEC 27001 Lead Auditor or Lead Implementer, PCI ISA, or CIA.

Responsibilities

• Maintain continuous audit readiness for SOC 2, ISO 27001, and PCI DSS by coordinating control owner activities, reviewing audit artifacts, and preparing stakeholders for assessments.
• Manage centralized evidence repositories; agree on evidence standards with control owners; and collect, validate, and maintain audit evidence.
• Serve as a primary liaison with external auditors, assessors, and certification bodies, coordinating schedules, evidence requests, walkthroughs, and testing.
• Monitor control performance through periodic reviews and testing, identify compliance gaps, and follow up on overdue activities and control failures.
• Track audit findings, control deficiencies, risk treatment actions, and corrective action plans through closure, coordinating remediation and validating closure evidence.
• Facilitate risk assessments across data center and technology operations, document risk treatment strategies, and maintain risk registers and mitigation tracking.
• Coordinate and run the ISO 27001 internal audit program, including audit schedules and plans, internal audits, reports, and corrective action follow-through.
• Develop and maintain compliance policies, procedures, and control documentation, and monitor regulatory, industry, and customer requirements for potential impacts.
• Support customer due diligence requests and security questionnaires.
• Partner with relevant departments to provide compliance guidance to control owners and produce leadership dashboards and status reporting on audit readiness, remediation, and risk.

Benefits

• Hybrid working environment.
• Team-building and educational opportunities.
• Competitive benefits package, including robust health benefits and a 401(k) company contribution.
• Unlimited PTO.
• RTD ECO pass or parking reimbursement.
• Competitive compensation, bonus, and an incentive plan.
• Relocation assistance on a case-by-case basis.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level