The Information Security and Compliance Analyst role at Asurity Technologies sits at the intersection of financial technology, regulatory adherence, and corporate data protection. In the mortgage and consumer lending sectors, technology providers don’t just build software; they process highly sensitive personally identifiable information (PII), financial records, and proprietary closing documents. As a result, information security and regulatory compliance function as a single, integrated operational discipline.
When evaluating a specific job title like the Asurity Technologies Information Security and Compliance Analyst, job seekers often encounter third-party aggregators or outdated career articles that list requirements without verifying current recruitment status. This guide explains what Asurity Technologies does, what an information security and compliance analyst actually does at a mortgage technology company, outlines confirmed and expected candidate qualifications, and provides a clear framework for verifying active vacancies.
What Asurity Technologies Does
Asurity Technologies is a specialized firm that delivers compliance-focused software solutions, advisory services, and document technology to mortgage lenders, banks, and non-bank financial institutions. Rather than operating as a general IT service provider, Asurity targets the strict regulatory demands of the residential mortgage lifecycle.
The company’s technology portfolio includes several core platforms:
- RegCheck: An automated compliance testing engine that evaluates loan origination data in real time against federal, state, and municipal lending rules to catch potential regulatory violations early.
- Propel: A dynamic mortgage document preparation engine designed to generate compliant closing disclosures, loan packages, and loss mitigation documents.
- RiskExec: A comprehensive reporting platform built to assist financial institutions with Home Mortgage Disclosure Act (HMDA), Community Reinvestment Act (CRA), and fair lending compliance analytics.
- Asurity Advisors: A regulatory advisory arm that provides expert guidance on compliance management systems (CMS), readiness assessments, and risk mitigation strategies.
Because Asurity’s software platforms interact directly with core banking engines, loan origination systems (LOS), and sensitive consumer financial records, security is an essential business requirement. Financial institutions auditing their vendors require rigorous proof that Asurity maintains strong data encryption, access controls, and operational resiliency. This environment makes the role of an information security and compliance analyst vital to maintaining market trust and satisfying third-party risk management expectations.
Information Security and Compliance Analyst Job Status
Determining whether the Information Security and Compliance Analyst position is currently accepting applications requires distinguishing between preserved historical listings and real-time recruitment data. Job board scrapers frequently republish archived job descriptions across third-party websites long after a vacancy has been filled or closed.
What Can Be Confirmed About the Listing
Secondary career records show that Asurity Technologies has previously recruited for security and compliance roles under similar job titles. Historically, these positions have been structured around full-time employment, often operating out of regional corporate offices or under hybrid work arrangements depending on business unit needs.
However, secondary job aggregators often display arbitrary publication dates that reflect when their system scraped the text rather than when Asurity posted the opening. Candidates should never rely on third-party posting dates as proof of an active hiring campaign.
How to Establish Whether Applications Are Still Open
To verify if an application can still be submitted, candidates should bypass job search engines and visit the official Asurity Technologies Careers Portal.
- Search Current Vacancies: Check the live job board hosted on Asurity’s official website for exact position titles matching your background.
- Evaluate Listing Recency: Look for active submission portals directly linked to Asurity’s Applicant Tracking System (ATS).
- Contact Talent Acquisition: If a specific listing is no longer indexed, reach out through Asurity’s official corporate contact routes to confirm whether the position was filled, archived, or converted into another role.
If the specific Information Security and Compliance Analyst vacancy does not appear on the official portal, it indicates that Asurity is not actively taking public applications for that specific title at this time.
What the Analyst Role Involves at a Mortgage Compliance Technology Company
At a specialized fintech firm like Asurity, an Information Security and Compliance Analyst bridges the gap between technical engineering teams and regulatory auditors. The primary duty involves two core activities: ensuring that internal security controls operate correctly and generating the documentation needed to prove compliance to enterprise customers and external regulators.
In practice, the operational responsibilities typically include:
- Third-Party Risk Management (TPRM) and Customer Questionnaires: Financial institutions conduct extensive vendor risk reviews before using software like RegCheck or Propel. An analyst reviews, completes, and tracks complex security questionnaires (such as SIG or CAIQ spreadsheets) submitted by prospective enterprise clients.
- Control Evaluation and Evidence Collection: Collaborating with internal IT, infrastructure, and software engineering teams to gather evidence demonstrating that controls (such as multi-factor authentication, encryption at rest, and vulnerability patching) meet established frameworks.
- Audit Coordination: Assisting with annual independent assessments, including SOC 1, SOC 2 Type II, and ISO audits. This involves organizing audit artifacts, scheduling interviews with control owners, and tracking corrective action plans.
- Policy Management and Review: Writing, updating, and distributing internal information security policies, acceptable use guidelines, and incident response procedures to reflect evolving industry standards.
- Security Awareness Training: Administering mandatory employee security training programs, phishing simulation campaigns, and tracking completion metrics across the workforce.
- Risk Register Maintenance: Documenting identified operational or technical risks in an enterprise risk register, scoring their potential impact, and following up on remediation deadlines with system owners.
This position focuses primarily on governance, risk, and compliance (GRC) workflows rather than active threat hunting or hands-on penetration testing.
Qualifications and Experience Specified by the Employer
While specific job descriptions vary over time, candidates seeking an information security and compliance analyst position within fintech and mortgage technology are generally evaluated against a structured blend of formal education, technical literacy, and framework knowledge.
| Requirement Category | Typical Qualifications and Expected Competencies |
| Education | Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent professional experience is often accepted. |
| Previous Experience | 2 to 5 years of direct experience in information security compliance, GRC, IT auditing, or risk management within regulated industries. |
| Compliance Frameworks | Practical familiarity with NIST CSF, NIST SP 800-53, SOC 2 Type II, ISO/IEC 27001, and financial data privacy regulations (such as GLBA). |
| Technical Knowledge | Understanding of cloud infrastructure security (AWS/Azure), access control models, network architecture, and vulnerability management tools. |
| Professional Certifications | Preferred industry credentials include CompTIA Security+, CISA, CRISC, Security+, or Associate of CISSP. |
| Communication Skills | Strong technical writing ability for drafting policies, creating audit documentation, and translating complex technical risks into business terms. |
Candidates who possess direct exposure to mortgage lending software workflows, SOC 2 audit preparation, or automated compliance testing systems stand out during the resume review process.
Asurity’s Recent Developments and Their Relevance to the Role
Corporate announcements and strategic initiatives provide valuable context regarding an employer’s operating environment, even when they do not explicitly announce new job vacancies.
Asurity announced major industry initiatives, including sponsoring the MISMO Mortgage Compliance Dataset Workgroup to advance standardized regulatory data frameworks and opening registration for The Forum by Asurity. Additionally, the firm continues to expand its advisory arm, Asurity Advisors, introducing senior compliance experts to assist financial institutions with evolving federal and state risk management expectations.
While these announcements demonstrate organizational growth and active participation in national RegTech standardization efforts, they do not serve as evidence that Asurity is currently hiring for a specific Information Security and Compliance Analyst vacancy. However, expanding software integrations and hosting industry-wide compliance forums highlights the firm’s ongoing commitment to maintain robust SOC 2 Type II compliance and rigorous data protection practices across its Propel and RegCheck platforms.
Other Career Opportunities at Asurity Technologies
If a direct opening for the Information Security and Compliance Analyst position is not actively listed on Asurity’s recruitment page, job seekers can explore adjacent functional areas within the company.
Relevant operational departments at Asurity include:
- Governance, Risk, and Compliance (GRC): Teams dedicated to enterprise risk management, vendor risk assessments, and policy maintenance.
- Regulatory Compliance and Advisory: Positions within Asurity Advisors focusing on mortgage legal research, fair lending analytics, and financial crimes compliance.
- Software Engineering and Cloud Operations: Technical roles overseeing AWS/Azure cloud infrastructure, DevSecOps pipelines, and application security.
- Product Management and Implementation: Operations teams supporting customer onboarding, software configuration, and platform quality control.
Candidates interested in this specific career domain should also consider broadening their search to similar positions at other RegTech and mortgage technology firms, including roles such as GRC Analyst, IT Audit Analyst, Security Assurance Specialist, or Third-Party Risk Analyst.
How to Apply for an Asurity Position
To submit an application for an active role at Asurity Technologies, follow a structured verification process to ensure your information reaches the internal talent acquisition team securely:
- Access the Official Channel: Navigate directly to the official Asurity Technologies Careers Page.
- Verify Job Details: Confirm that the job title, requisition number, work location, and employment type match your current career goals.
- Tailor Your Resume: Align your application materials with the specific requirements detailed in the official job description. Emphasize direct experience with SOC 2 audits, vendor security questionnaires, NIST frameworks, or financial software compliance.
- Submit via Official ATS: Apply directly through Asurity’s hosted applicant tracking system. Avoid submitting sensitive personal information, banking details, or processing fees through unverified third-party job boards or unofficial communication channels.
Salary, Location, and Employment Conditions
Because compensation structures depend heavily on geographic location, candidate seniority, and internal band evaluations, unconfirmed salary figures should be evaluated cautiously.
- Compensation: Asurity Technologies does not publicly publish a universal salary bracket for historical analyst positions in search snippets. Candidates should request confirmed pay bands during initial recruiter screenings rather than relying on national third-party averages.
- Work Location: Asurity operates corporate offices in major metropolitan hubs, including Washington, D.C., while offering hybrid or remote work arrangements for specific technical and advisory units depending on business requirements.
- Employment Type: Standard security and compliance analyst roles are structured as full-time, exempt professional positions with standard corporate benefits packages.
Career Progression From Information Security and Compliance Work
Gaining operational experience as an Information Security and Compliance Analyst at a financial technology firm provides a strong foundation for long-term professional advancement across governance, risk, and cybersecurity domains.
Potential career growth paths include:
- Senior GRC Analyst / Lead Security Auditor: Transitioning from control evidence gathering to managing enterprise-wide audit cycles and designing risk frameworks.
- Third-Party Risk Manager: Specializing in vendor security evaluations, supply chain risk management, and client security assurance.
- Information Security Manager / Director of Compliance: Stepping into leadership roles that oversee corporate security governance, regulatory alignment, and team management.
- Cybersecurity Consultant: Moving into advisory services to help commercial banks and mortgage lenders build and evaluate their internal compliance management systems (CMS).
Frequently Asked Questions
Is the Asurity Technologies Information Security and Compliance Analyst position currently open?
Active recruitment status can only be confirmed by checking the live listings on the official Asurity Careers Portal. If the job title is not indexed on their official board, the position is not currently accepting public applications.
Where should candidates check for verified job openings at Asurity?
Candidates should rely exclusively on the official Asurity Technologies website and their primary corporate LinkedIn page, avoiding unverified third-party job scrapers.
What core frameworks should an applicant know for this role?
Candidates working in financial technology compliance should possess practical familiarity with SOC 2 Type II, NIST CSF, ISO/IEC 27001, and financial data privacy mandates such as GLBA.
Does Asurity Technologies offer remote work?
Work arrangements depend on the specific business unit and job posting. Asurity utilizes both office-based hybrid setups and remote arrangements depending on the needs of the role.