{"id":1440690,"url":"https://alion.io/job/ecmc-group-senior-risk-compliance-analyst","title":"Senior Risk & Compliance Analyst","company":{"id":1857870,"name":"ECMC Group","domain":"ecmcgroup.org","url":"https://alion.io/company/ecmcgroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Minneapolis, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false},{"name":"PCI DSS","optional":false},{"name":"SharePoint","optional":false}],"status":"live","first_seen_at":"2026-09-14T00:00:00Z","employer_posted_date":"2026-09-14","last_verified_at":"2026-10-31T18:19:43Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"ECMC Group is a nonprofit corporation focused on helping students succeed. Headquartered in Minneapolis, ECMC Group and its family of companies provide financial tools and services, as well as funding for innovative programs to help students achieve their academic and professional goals.\nJob Summary:\nServes as a senior member of the IT Risk and Compliance function, providing expertise and independent judgment to support the organization's risk management, regulatory compliance, and information security objectives. Partners with stakeholders across the enterprise to evaluate risk, strengthen controls, and promote compliance with applicable standards and requirements. Acts as a trusted advisor within the organization, contributing to the effectiveness and continuous improvement of risk and compliance practices while serving as a resource to less experienced team members.\nEssential Duties and Responsibilities:\nLeads and performs medium to high complexity IT risk and compliance reviews, including planning, risk analysis, evidence gathering, control testing, and reporting.\n\nCoordinates and supports FISMA readiness assessments, SOC reporting, external penetration testing, and internal and external audit activities.\n\nPlans and coordinates security awareness initiatives, including annual training, phishing simulations, security communications, and custom learning content.\n\nLeads vendor security risk assessments and evaluates security and compliance requirements within vendor relationships.\n\nIndependently engages stakeholders to identify control weaknesses, assess compliance risks, and recommend corrective actions.\n\nPrepares clear documentation, reports, and recommendations that improve information system controls and risk management practices.\n\nSecures stakeholder ownership of findings and remediation plans and monitors progress through resolution.\n\nCompletes enterprise risk assessments and supports the design and implementation of effective controls to address emerging risks and compliance requirements.\n\nContributes to the development and continuous improvement of risk and compliance standards, policies, procedures, monitoring activities, and governance practices.\n\nMentors less experienced team members, manages stakeholder expectations, and communicates complex compliance concepts to business and technology leaders.\n\nPerforms other duties or responsibilities as assigned.\n\nRequired Qualifications:\nBachelor's degree in Computer Information Systems, Information Technology, Legal Studies, or a related field; or an additional two years of relevant IT experience in lieu of a degree.\n\n5+ years of experience in IT risk and compliance, IT governance, IT auditing, information security, or a related field.\n\nExperience supporting SOC reporting, third-party assessments, FISMA readiness activities, and internal or external audits.\n\nExperience applying security control frameworks, risk assessment methodologies, and compliance standards, including NIST, ISO 27001, COSO, COBIT, PCI DSS, HIPAA, or similar frameworks.\n\nExperience evaluating or supporting controls related to identity and access management, vulnerability management, data protection, change management, software development lifecycle, or other IT control domains.\n\nExperience assessing security controls within AWS or other cloud environments.\n\nAdvanced proficiency with Microsoft Office applications, including Excel data analysis and SharePoint content and site administration.\n\nExperience developing and delivering training, awareness content, or learning programs using Articulate Rise or similar learning platforms.\n\nPreferred Qualifications:\nCertified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) certifications\n\nBig 4 accounting firm experience\n\nThe pay range for this position is $115,000-$125,000. Actual compensation may vary based on factors such as relevant experience, peer and market benchmarks, and geographic location.\nThis position is classified ashybrid Monday - Wednesday and requires attendance in Minneapolis, MN.\nTo perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nECMC Group also provides a comprehensive benefits package:\nHealth & wellness benefits: Medical,dental, and vision insurance plan options, with a generous employer subsidy. Company paid life & disability insurance, pre-tax flexible spending accounts and robust wellness programs.\nFinancial benefits: Generous401(k) plan with a company match up to 6% and additional discretionary contribution potential, holiday time off, paid time off accrual starting at 20 days/year and commuter subsidy.\nEducation benefits: Tuition reimbursement up to $10,500/year for approved programs and student loan payment reimbursement up to $4,800/year. Up to $5,250 of qualifying education benefits can be reimbursed pre-tax.","description_format":"text","description_chars":5078,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Vision insurance","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-09-29T04:47:27Z"}],"visa":[],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.738,"p_room":0.55,"age_days":47,"expected_fill_days":32,"reasons":["conf:1","win:tail"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/ecmc-group-senior-risk-compliance-analyst","json_url":"https://alion.io/job/ecmc-group-senior-risk-compliance-analyst.json","meta":{"generated_at":"2026-10-31T22:23:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35027,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1857870},"rest":"https://alion.io/mcp/rest/get_company?id=1857870"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fecmc-group-senior-risk-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fecmc-group-senior-risk-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fecmc-group-senior-risk-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ecmc-group-senior-risk-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fecmc-group-senior-risk-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1440690}},{"tool":"search_jobs","arguments":{"company":"ecmcgroup.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1440690},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}