Sr. IT Compliance Analyst

Danaher•Coralville, IA

2d•Remote

About The Position

The Sr. IT Compliance Analyst is responsible for executing and analyzing a broad set of control-based activities to support IDT’s compliance objectives, inclusive of General Controls (GC), SOX, PCI-DSS and Information Security, amongst others. As part of the IT Governance, Risk and Compliance Team, they will operate independently as a key contributor and subject matter expert (SME), collaborating with technical and business stakeholders, serving as the SOX Champion, and communicating outcomes—including results and risks—to senior (L1) stakeholders. They will contribute to the development and sustainment of trusted processes & procedures, minimizing risk to IDT’s important mission. This position reports to the Sr. IT GRC Manager and is part of the IDT IT-GRC Department located in Coralville, Iowa, and will be a remote role.

Requirements

Bachelor’s Degree required
7 + years working on a GRC Team or related technical discipline
Experience working or supporting Change Management and participation in a Change Advisory Board (CAB).
5 or more years of experience working in or supporting User Access Management.
At least 5 years experience working with various compliance / governance standards in SOX, PCI, HIPAA, GDPR, General Compliance and supporting internal / external audits.

Nice To Haves

Creating / developing programs to bridge or eliminate gaps within the organization.
Utilizing continuous improvement methods and frameworks to identify areas of improvement and create opportunities for efficiency in GRC.
Assisting in / supporting Third-Party Risk Management activities related to risk assessments and compliance-gap analysis.

Responsibilities

Lead IT General Controls execution across key domains (e.g., user access management and change management/CAB participation) to ensure controls are designed, operating effectively, and supported by audit-ready evidence.
Maintain IT-GRC policies, procedures, and documentation; coordinate updates with external policy owners.
Lead Vendor Management / Third-Party Risk Assessment (TPRA) activities and annual reviews; coordinate completion of customer questionnaires/assessments by synthesizing inputs from technical and business stakeholders.
Coordinate and manage Disaster Recovery activities with internal and external teams, including planning, execution support, documentation of outcomes, and identification of gaps.
Lead RCA/root cause analysis for business-impacting events, defining corrective actions and tracking remediation to completion.
Prepare for and support internal and external audits, and present risk, compliance, audit, and remediation status/results to senior stakeholder groups; escalate issues and propose solutions as needed.
Provide peer-to-peer support across IT and the business; train and coach junior team members to build team capability and consistency.