Junior IT Compliance Analyst

Fresenius Medical Care•Waltham, MA

3d•$59,000 - $100,000•Remote

About The Position

This is a full-time, remote position where the Junior IT Compliance Analyst will assist with the collection, organization, and maintenance of documentation supporting IT controls. The role involves working with IT control owners to obtain evidence for control testing, participating in meetings to coordinate testing, and assisting with the analysis of testing results to identify potential control deficiencies. The analyst will track remediation activities, support access certification for financially significant systems, and assist with requests from external and Internal Audit. Additionally, the position involves preparing compliance reporting, supporting annual IT scoping activities, assisting with IT control assessments for new entities or systems, and supporting IT management in identifying and documenting remediation activities. Regular status updates to management are required, along with maintaining current IT control documentation and procedures. The role also supports compliance-related projects and initiatives, including the implementation of audit and compliance management tools, and performs SAP role and access review activities.

Requirements

Bachelor’s degree in information systems, Computer Science, Business, Accounting, Finance, or a related field.
1–3 years of experience in IT audit, IT compliance, SOX, IT controls, IT risk management, information technology, or a related field; or equivalent directly related work experience.
Internship or co-op experience in IT audit, compliance, risk, cybersecurity, or related areas may be considered.
Basic understanding of IT general controls, access controls, change management, and IT operations.
Strong organizational and analytical skills.
Strong written and verbal communication skills.
Ability to manage multiple assignments and meet established deadlines.
Ability to work effectively with stakeholders at various levels of the organization.
Strong attention to detail and ability to maintain accurate documentation.
Proficiency with Microsoft Office applications, particularly Excel and PowerPoint.
Ability to work independently on assigned responsibilities while seeking guidance when appropriate.
Demonstrated willingness to learn and develop expertise in IT compliance.

Nice To Haves

CISA or other relevant certification is preferred but not required.
Experience with ERP, enterprise applications, SAP, PeopleSoft, data centers, or other large-scale technology environments is preferred.
Exposure to COSO, COBIT, SOX, NIST, ISO 27001, or other control frameworks is preferred.
Experience with audit, GRC, compliance, or workflow management tools is preferred.

Responsibilities

Assist with the collection, organization, and maintenance of documentation supporting IT controls.
Work with IT control owners to obtain evidence necessary to complete control testing.
Participate in meetings with IT compliance personnel and control owners to coordinate testing activities.
Assist with analysis of testing results and identification of potential control deficiencies.
Track remediation activities and follow up with control owners to obtain required evidence.
Support access certification activities for financially significant systems, including segregation-of-duties reviews.
Assist with requests from external auditors and Internal Audit related to IT matters.
Assist in preparing compliance reporting, dashboards, metrics, and management updates.
Support annual IT scoping activities by gathering information regarding applications, systems, infrastructure, and changes to the IT environment.
Assist with IT control assessments for new entities, applications, systems, or processes that may be relevant to IT compliance.
Support IT management in identifying and documenting remediation activities when controls do not meet established requirements.
Provide regular status updates to IT compliance management regarding testing progress, outstanding requests, identified issues, and remediation activities.
Assist with maintaining current IT control documentation and procedures as requirements and organizational processes change.
Support compliance-related projects and initiatives, including implementation or enhancement of audit and compliance management tools.
Assist with SAP role and access review activities, including review of potential segregation-of-duties conflicts and documentation of appropriate mitigating controls.
Perform other duties as assigned.