IT Security Compliance Analyst

Masco•Vista, CA

15h•Hybrid

About The Position

We are hiring an IT Security Compliance Analyst to join our IT Team! As the Analyst, IT Security Compliance, you'll serve as a key connection point between IT Operations, Software Development, management, and the Internal Audit functions. You'll help ensure that systems, processes, and controls are implemented effectively while meeting both regulatory compliance and internal security standards. In this role, you'll work cross-functionally across Watkins Wellness and Masco, partnering with IT teams, business leaders, and audit stakeholders to coordinate reviews, maintain documentation, respond to audit requests, and support cybersecurity and compliance initiatives. You'll balance day-to-day audit and compliance administration with opportunities to improve processes, strengthen controls, and identify more efficient ways of working. During your first several months, you'll focus on learning Watkins and Masco audit requirements, understanding key business processes, and building knowledge of how information is managed and secured across the organization. This position offers excellent growth potential as the organization continues to expand its security and compliance capabilities. While compliance and audit experience are essential, we are committed to helping the right candidate further develop their technical security knowledge and skills. This is a hybrid role.

Requirements

Bachelor's degree in Business Administration, Accounting, Finance, or a related field with an IT background preferred.
3+ years of experience in IT security, compliance, auditing, or a related field.
Proven audit experience supporting internal, external, or regulatory audits.
Understanding of IT General Controls (ITGCs), access management, and security best practices.
Experience working with compliance and regulatory frameworks such as SOX, PCI, NIST, CIS, ISO, or similar standards.
Familiarity with IT administration concepts and systems such as Active Directory or similar technologies.
Strong verbal and written communication skills with the ability to collaborate effectively with IT teams, management, auditors, and cross-functional stakeholders.
Excellent organizational skills, attention to detail, and ability to manage multiple priorities while meeting deadlines.
Proficiency with Microsoft 365 applications, including Outlook, Word, Excel, and other business productivity tools.

Nice To Haves

Experience with ServiceNow, ITIL-based processes, or related service management practices is a plus.
CISA and/or CISSP certifications are desirable.

Responsibilities

Partner with stakeholders across Watkins Wellness and Masco to coordinate audit activities, respond to compliance inquiries, communicate requirements, and ensure audit requests are addressed efficiently and accurately.
Conduct and administer recurring audits and control reviews, monitor compliance with established security policies and regulatory frameworks, and help maintain a strong IT security and compliance posture across the organization.
Review employee access requests, account changes, privileged access assignments, department transfers, and deprovisioning activities to ensure appropriate controls are followed and security risks are minimized.
Track audit findings and remediation efforts, support corrective action plans, and identify opportunities to streamline processes, strengthen controls, and improve the effectiveness of compliance activities.
Collect, validate, and maintain audit evidence and documentation, prepare reports and responses for audit reviews, coordinate audit schedules, and ensure key information is available when needed.
Support security and risk management initiatives by coordinating cybersecurity assessments and penetration testing activities, assisting with NIST/CIS evaluations, and helping ensure IT practices remain secure, compliant, and current.