IT Compliance & Automation Analyst

Ibotta•Denver, CO

8d•Hybrid

About The Position

Ibotta is seeking an IT Compliance & Automation Analyst to join their innovative team. This role will strengthen and modernize Ibotta's IT compliance program, supporting compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001. The position involves identifying opportunities to automate manual processes and build more efficient, scalable compliance workflows. The ideal candidate will have demonstrated IT compliance experience in a public company environment and a passion for using automation and emerging AI technologies to improve compliance processes. This is a hybrid position located in Denver, Colorado, requiring 3 days in the office per week. Candidates must live in the United States, and relocation assistance is available for those moving to Denver.

Requirements

4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC
Bachelor's degree in IT, Information Systems, or a related field, or equivalent practical experience required
Working knowledge of SOC 1, SOC 2, and ISO 27001, including how these frameworks overlap with and differ from SOX requirements
Proficient in technical auditing and experience translating controls and compliance requirements for technical stakeholders
Demonstrated experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies
Curiosity and sound judgment around applying AI to compliance workflows while maintaining appropriate standards for audit-quality work
Experience documenting internal control processes through narratives, flowcharts, or similar documentation
Effective analytical, problem-solving, communication, and collaboration skills, with the ability to work independently and manage competing priorities
Knowledge of IT systems and cloud environments such as AWS

Nice To Haves

CISA or similar professional certification preferred
SOC 2 or ISO 27001 certifications/coursework are a plus

Responsibilities

Partner with IT and business teams to develop, maintain, and continuously improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, providing guidance on compliance requirements and best practices
Lead IT control testing and audit coordination across compliance frameworks, partnering with internal audit, external auditors, and third-party assessors
Conduct risk assessments, identify control gaps and compliance issues, and partner with process and control owners to drive remediation
Identify manual, time-intensive compliance processes — including access reviews, evidence collection, and control monitoring — and redesign them using scripting, workflow tools, and AI-assisted technologies
Build and maintain a roadmap of compliance automation initiatives, measuring efficiency gains and reporting progress to management
Continuously improve audit evidence collection and PBC processes to reduce administrative burden while maintaining audit quality
Develop a solid understanding of Ibotta's IT infrastructure, applications, and systems to proactively identify risks and opportunities for improvement
Stay current on evolving regulatory requirements and emerging automation/AI technologies, and provide guidance and training to relevant stakeholders
Embrace and uphold Ibotta's Core Values: Integrity, Boldness, Ownership, Teamwork, Transparency, & A good idea can come from anywhere