IT Compliance Analyst
About The Position
The IT Compliance Analyst serves as a member of the IT Compliance team, assisting day-to-day governance, risk, and compliance (GRC) operations, PCI and coordination with internal and external auditors. This role drives end-to-end execution of SOX audit and PCI programs, ensures IT control effectiveness across key systems (ERP, infrastructure, and cloud), and supports the design of scalable, automated compliance processes. The ideal candidate has solid experience managing SOX ITGC testing cycles, coordinating control owners, and identifying process improvements that reduce audit risk and increase operational efficiency.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Business, or related field required.
- 4–7 years of experience in IT compliance, audit, or ITGC management.
- Strong background in SOX ITGC, access control, change management, or system security reviews.
- Experience with ERP platforms such as Oracle, SAP, or JD Edwards and familiarity with cloud or GRC tools (Fastpath, Pathlock, Helix, Smartsheets etc.).
- Deep understanding of IT control frameworks (SOX, NIST, COBIT, ISO 27001).
- Excellent communication, organization, and stakeholder management skills.
- Strong analytical and problem-solving mindset with attention to detail.
- Advanced proficiency with Microsoft Excel, SharePoint, Teams, and report generation tools.
Nice To Haves
- CISA, CRISC, or Security+ certification.
Responsibilities
- Serve as a liaison for internal and external IT audits, ensuring audit readiness and consistent, high-quality deliverables.
- Assist evidence collection, walkthroughs, and control testing; review documentation prepared by analysts for accuracy and completeness.
- Manage tracking of findings, remediation plans, and follow-up validation until closure.
- Provide management with clear reporting on control of performance and issue trends.
- Lead recurring IT compliance processes, including User Access Reviews (UARs), Change Management, and Backup/DR control monitoring.
- Evaluate existing controls and recommend enhancements aligned with SOX, NIST, or ISO (27001, 9001, etc) standards.
- Support automation and integration of compliance activities through GRC tools or analytics dashboards.
- Coordinate with IT, Finance, and Security teams to embed compliance into day-to-day operations.
- Maintain and update IT policies, standards, and control documentation with appropriate versioning.
- Facilitate periodic policy attestations and awareness training sessions for IT staff.
- Ensure evidence retention and audit documentation meet company and regulatory expectations.
- Develop and present compliance dashboards, control metrics, and executive summaries to management.
- Identify control inefficiencies and propose remediation or automation opportunities.
- Contribute to the strategic roadmap for IT compliance maturity and audit optimization.
Benefits
- Medical, dental, vision, life and disability insurance for the associate and family (if applicable)
- Flexible Spending Account
- Health Savings Account
- 401k retirement program
- Mental health resources / Employee Assistance Program
- Flexible paid vacation time
- 6 paid holidays
- 30% employee discount across our family of brands
- Potential eligibility for annual merit-based wage increase, if applicable
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
