Junior IT Compliance Analyst

Fresenius Medical Care•Waltham, MA

2d•Remote

About The Position

This is a full-time, remote position focused on assisting with IT compliance activities. The role involves supporting the collection and maintenance of documentation for IT controls, coordinating with control owners for evidence gathering and testing, analyzing results, tracking remediation, and supporting various compliance-related projects and audits. The analyst will also assist with access certifications, auditor requests, reporting, and maintaining control documentation.

Requirements

1–3 years of experience in IT audit, IT compliance, SOX, IT controls, IT risk management, information technology, or a related field; or equivalent directly related work experience.
Internship or co-op experience in IT audit, compliance, risk, cybersecurity, or related areas may be considered.
Basic understanding of IT general controls, access controls, change management, and IT operations.
Strong organizational and analytical skills.
Strong written and verbal communication skills.
Ability to manage multiple assignments and meet established deadlines.
Ability to work effectively with stakeholders at various levels of the organization.
Strong attention to detail and ability to maintain accurate documentation.
Proficiency with Microsoft Office applications, particularly Excel and PowerPoint.
Ability to work independently on assigned responsibilities while seeking guidance when appropriate.
Demonstrated willingness to learn and develop expertise in IT compliance.

Nice To Haves

CISA or other relevant certification is preferred but not required.
Experience with ERP, enterprise applications, SAP, PeopleSoft, data centers, or other large-scale technology environments is preferred.
Exposure to COSO, COBIT, SOX, NIST, ISO 27001, or other control frameworks is preferred.
Experience with audit, GRC, compliance, or workflow management tools is preferred.

Responsibilities

Assist with the collection, organization, and maintenance of documentation supporting IT controls.
Work with IT control owners to obtain evidence necessary to complete control testing.
Participate in meetings with IT compliance personnel and control owners to coordinate testing activities.
Assist with analysis of testing results and identification of potential control deficiencies.
Track remediation activities and follow up with control owners to obtain required evidence.
Support access certification activities for financially significant systems, including segregation-of-duties reviews.
Assist with requests from external auditors and Internal Audit related to IT matters.
Assist in preparing compliance reporting, dashboards, metrics, and management updates.
Support annual IT scoping activities by gathering information regarding applications, systems, infrastructure, and changes to the IT environment.
Assist with IT control assessments for new entities, applications, systems, or processes that may be relevant to IT compliance.
Support IT management in identifying and documenting remediation activities when controls do not meet established requirements.
Provide regular status updates to IT compliance management regarding testing progress, outstanding requests, identified issues, and remediation activities.
Assist with maintaining current IT control documentation and procedures as requirements and organizational processes change.
Support compliance-related projects and initiatives, including implementation or enhancement of audit and compliance management tools.
Assist with SAP role and access review activities, including review of potential segregation-of-duties conflicts and documentation of appropriate mitigating controls.
Perform other duties as assigned.