Data Recognition Corporation
Data Recognition Corporation
501 – 1.000 Angajați
B2BEducațieSaaS
Data Recognition Corporation (DRC) dezvoltă soluții de evaluare, testare și date pentru educație, licențiere și certificare, precum și pentru organizații guvernamentale și comerciale. Activitatea sa acoperă evaluări la scară largă, cu miză ridicată și formative, inclusiv proiectarea testelor, furnizarea online prin platforme precum DRC BEACON și IDEAS, servicii psihometrice, securitatea testelor și raportarea. Portofoliul DRC include produse de evaluare pentru elevii din clasele K–12 și pentru adulți, precum TerraNova, LAS Links și TABE, alături de servicii de examinare, soluții pentru sondaje și documente, programe de cercetare și evaluări ale implicării angajaților. Compania se concentrează, de asemenea, pe protecția datelor și pe standarde de evaluare interoperabile, inclusiv IMS QTI.

Information Security Compliance Analyst (Remote, Minnesota)

Support Data Recognition Corporation’s information security compliance program through GovRAMP, NIST RMF, and SOC 2 activities. Lead audit coordination, risk remediation, and business continuity initiatives.

Descriere

  • Obtain and maintain GovRAMP compliance
  • Support government contract Authority to Operate (ATO) approvals through the NIST Risk Management Framework (RMF)
  • Develop and manage System Security Plan (SSP) documentation and Plans of Action and Milestones (POA&Ms)
  • Assess and audit system security controls and conduct continuous monitoring
  • Coordinate annual internal and external audits, including third-party and customer audits
  • Track and drive remediation of POA&M items
  • Develop and review security policies and standards
  • Advance security risk management practices
  • Manage and improve Business Continuity and Disaster Recovery processes
  • Maintain security and compliance metrics
  • Support security awareness and other security program activities
  • Promote business continuity and organizational resiliency
  • Work without direct reports; perform additional duties assigned by the employer

Cerințe

  • At least 3 years of experience in information security, GRC, auditing, or compliance
  • Working knowledge of the NIST 800-53 Rev. 5 framework, including its implementation and audit requirements
  • General knowledge of the Risk Management Framework (RMF), security technical implementation guides (STIGs), and POA&M documentation
  • Experience managing SOC 2 Type II compliance audits
  • High personal integrity and discretion when handling sensitive, personal, and classified information
  • Strong communication skills and the ability to collaborate across the organization while independently leading initiatives
  • Employer cannot provide sponsorship for this position

Locuri de muncă similare

Ambush

Senior Data Scientist / ML Engineer

Ambush

Build forecasting, optimization, and AI solutions at Ambush, an engineering and strategy consultancy. Develop secure Python services and take machine learning systems into production.

Deschide
Viz.ai

Finance and Accounting Manager

Viz.ai

Lead Israeli accounting, financial planning, and reporting for Viz.ai’s healthcare AI business, while managing a Staff Accountant. Oversee R&D forecasts, product reviews, and AWS cost analysis in partnership with finance teams in Israel and the U.S.

Deschide