IT Audit & Compliance Associate

EXZEO GROUP, INC•Tampa, FL

4d•Hybrid

About The Position

The IT Audit & Compliance Associate is responsible for supporting internal and external audit activities through the collection, organization, and tracking of audit documentation and compliance evidence. This position coordinates audit requests, maintains audit records and status trackers, monitors outstanding items, and follows up with business and technology teams to ensure timely completion of audit deliverables. The role serves as a liaison between auditors and internal stakeholders, vendors, and regulators, helping to facilitate audit readiness and support ongoing compliance efforts. The position also supports IT control documentation, risk assessments, vendor due diligence, remediation tracking, and management reporting. This position requires strong organizational skills, attention to detail, effective communication, and the ability to manage multiple priorities while driving accountability across teams.

Requirements

Strong organizational and follow-up skills, with demonstrated analytical and problem-solving ability.
Ability to manage multiple requests and deadlines simultaneously.
Excellent written and verbal communication skills.
Comfortable working with technical and non-technical teams.
Demonstrate a foundational understanding of IT infrastructure, databases, web technology and security frameworks.
Proficiency with Microsoft Excel, Word, PowerPoint, Teams, and collaboration tools.
Experience maintaining trackers, spreadsheets, and documentation repositories.
1-2 years of relevant experience in an IT audit, compliance, risk management, internal audit, governance, or similar control-focused environment required.

Nice To Haves

Exposure to IT audits, compliance, SOC, SOX, or risk management processes is preferred but not required.
Knowledge of COSO, NIST, ISO 27001, and vendor risk management is also preferred.
Proficiency using JIRA or similar governance, risk, compliance, or workflow tools is a plus.

Responsibilities

Coordinate IT audit and compliance activities, including SOX, SOC 1, SOC 2, OIR, and other regulatory examinations.
Request, collect, organize, validate, and maintain audit documentation and supporting evidence from business and IT teams.
Monitor control owners' progress on completing audit-related tasks and remediation items.
Escalate overdue items and provide regular status updates to management, including audit dashboards and management reports.
Maintain audit calendars, status reports, action-item logs, and evidence repositories.
Serve as the primary point of contact for collecting information requested by auditors and as a liaison among business owners, IT teams, auditors, vendors, and regulators.
Schedule meetings and coordinate communications between auditors and internal teams.
Assist with customer and regulatory audit requests by gathering required documentation.
Assist with documenting and maintaining IT controls, policies, standards, and procedures.
Support risk assessments and maintain risk registers and remediation tracking.