IT Compliance Analyst

Alphatec Spine • Carlsbad, CA

17h • $110,000 - $125,000

About The Position

The IT Compliance Analyst will be focused on identifying and mitigating compliance risk, compliance initiatives and assessments. Reporting to the Senior Manager, Information Security & IT Infrastructure, the IT Compliance Analyst will support the planning, execution, and reporting of all IT audits. Successful applicants are self-motivated, detail-oriented, and have the technical acumen to support day-to-day compliance activities.

Requirements

• The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• Proven experience in IT audit, Technology Assurance or Governance, Risk & Compliance (GRC) related roles.
• In-depth understanding of Sarbanes Oxley (SOX) regulation including its requirements, regulations, and implications for financial reporting and internal controls.
• Experience working within an SAP environment
• Background working in or with public companies
• Familiarity with HITRUST CSF controls
• Excellent written and verbal communication skills
• Bachelor’s degree from four-year College or university in Business Administration, Computer Science, Information Systems, or equivalent.
• 3-5 years of experience in IT audit, Technology Assurance or Governance, Risk & Compliance (GRC).
• Must have CISA, CCSFP preferred
• For roles based in the United States that require access to hospital facilities, must be eligible for and maintain credentials at all required hospitals, including meeting any applicable physical requirements or vaccination requirements (including the COVID-19 vaccine, as applicable).

Nice To Haves

• Big 4/mid-tier experience strongly preferred.

Responsibilities

• Collaborate with Internal Audit and External Audit during the SOX lifecycle on assigned processes (IT General Controls, IT Application Controls)
• Support audits and assessments to evaluate compliance with regulatory requirements (e.g., HIPAA, HITRUST, SOX).
• Manage quarterly, semi-annual and annual IT testing for internal and external audits, risk assessments, and policy compliance
• Support and maintain continuous compliance with HITRUST CSF requirements, including evidence collection, control testing, and audit coordination
• Collaborate with IT and business teams to identify and document compliance and IT risk issues.
• Maintain governance tools for risk and compliance to support IT compliance activities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level