IT Risk & Compliance Analyst

Angi•Denver, CO

1d•$85,000 - $115,000•Remote

About The Position

The Angi Compliance Team is responsible for ensuring controls are consistently applied within our environment to meet compliance obligations including Sarbanes-Oxley (SOX), PCI, GDPR, etc. and risk mitigation strategies. As a member of that team, you will work across the organization to design, implement and support the IT general controls (ITGC) framework, lead remediation efforts and identify emerging IT risks. You will be reporting to the IT Risk and Compliance Manager, while working closely with internal and external audit teams, engineering and product. You will continue to raise the bar to ensure our products, practices, systems and infrastructure remain compliant and meet the ever evolving needs of the greater business.

Requirements

Bachelor’s degree in Information Systems, Engineering or other related field
2+ years of experience in audit, compliance, IT, information security or other related field, assessing, developing or implementing various IT controls, as it relates to access management, change management and IT operations
Sound understanding of cloud IT control principles including logical access controls, change control, privileged access, segregation of duties, and computer operations
Experience implementing, participating in, or conducting compliance or audit assessments (e.g. IT SOX, SOC 2, PCI assessments, etc.)
A great collaborator with both technical and non-technical team members
Exceptional organizational skills
Excellent verbal and written communication skills

Nice To Haves

Experience using AI tools to support compliance workflows, documentation, or reporting, a plus
Experience with scripting languages like Ruby, Python, Unix shell, a plus
Experience with writing SQL queries, a plus
Experience with Auditboard, a plus

Responsibilities

Assist with the development and maintenance of a rigorous ITGC compliance program
Design and improve ITGCs across our products and infrastructure
Work with a variety of internal teams to ensure their practices and products are compliant with IT SOX, GDPR, PCI and other related compliance obligations
Develop, collect, and maintain necessary evidentiary documentation for internal and external auditors
Work with internal teams to design and maintain automated systems to help with continuous compliance
Identify risks and gaps in our ITGC framework to facilitate remediation
Assist with the coordination of all required IT SOX internal controls testing including: Planning, coordinating, and facilitating audit walkthroughs
Managing the distribution and receipt of external and internal audit requests
Communicating audit results and progress via written reports and oral presentations to various stakeholders
Working with control owners to periodically certify controls and processes
Create and maintain relevant documentation including narratives, control documentation and process flowcharts