Senior Analyst, IT Risk & GRC

Viasat, Inc.•Carlsbad, CA

12h•Onsite

About The Position

The IT Risk Senior Analyst is a strategic advisor responsible for integrating IT risk management and compliance into enterprise technology transformation initiatives. This role ensures that systems and processes are designed with robust controls to meet SOX and other regulatory requirements while enabling business innovation. Acting as a main liaison between IT, Finance, and Audit, the role delivers executive-level insights on compliance posture and guides teams in building sustainable, audit-ready environments. The ideal candidate possesses a strong blend of technical IT auditing skills, experience with Governance, Risk, and Compliance (GRC) frameworks, and a proactive attitude focused on improving documentation quality and streamlining control walkthroughs. Reporting to the Global IT SOX Risk Management Leader, you’ll drive strategic SOX readiness projects and provide risk advisory expertise across many process areas to ensure compliance with SOX while enabling process excellence. You’ll play a key role in strengthening the control environment and maintaining our company’s financial integrity. This is a site‑based role, employees work 3+ days (60%+) per week from a Viasat office or work location within a standard five‑day workweek.

Requirements

5+ years of experience in IT Audit, IT Compliance, or IT Risk Management. Experience within a Big 4 firm or a large public enterprise is highly preferred.
Bachelor’s degree or equivalent experience in Management Information Systems (MIS), Accounting Information Systems, Computer Science, Finance, or a related field.
Strong expertise in SOX frameworks, ITGCs, automated application controls, and report testing (IUC/IPE).
Proven experience designing, implementing, or testing IT controls within complex IT environments (applications, databases, infrastructure) during system implementations.
Superb communication and customer management skills, with a demonstrable ability to translate complex, technical IT risks into actionable insights for non-technical financial executives.
An analytical attitude dedicated to assessing risk and recommending practical, sustainable remediation solutions.
Professional designations such as CISA (strongly preferred), CRISC, CISSP, or a CPA (with a technology focus).
U.S. citizenship is required.

Nice To Haves

Experience supporting large-scale digital transformations or major ERP implementations (e.g., SAP, Oracle, Workday).
Familiarity with automated controls, cloud environments, and modern architectures (SaaS, PaaS, GCP data environments).
Proven track record of influencing without authority across highly matrixed, global organizations.
Exposure to data analytics or visualization tools (e.g., Tableau) for continuous compliance monitoring.
A collaborative attitude capable of driving focused working sessions with multi-functional teams to gather audit support efficiently.

Responsibilities

Prepare periodic and ad-hoc updates on IT risk, compliance status, and transformation initiatives for senior leadership.
Lead regular governance meetings with Global IT (GIT), Finance, Internal Audit (IA), and External Audit to drive alignment.
Lead the execution of IT SOX compliance activities, including scoping, risk assessment, and testing of ITGCs across change management, logical access, and computer operations.
Develop and maintain a forward-looking compliance roadmap, aligning priorities and timelines with business leadership.
Assist in maintaining and maturing the IT Controls framework, aligning corporate controls with industry standards (COBIT, NIST, ISO) and organizational risk appetite.
Actively monitor the progress of open remediation milestones, providing regular status updates to management, and perform independent validation testing to ensure deficiencies are effectively resolved before formal testing.
Serve as the main point of contact for external auditors and internal customers to facilitate evidence collection, resolve testing exceptions, and clarify management determinations.
Advise on and ensure the integration of ITGCs and automated application controls into major system implementations, upgrades, and enhancements.
Support control design, documentation, and validation throughout the System Development Life Cycle (SDLC), ensuring controls are operating effectively before systems transition to production.
Architect and document high-quality control walkthroughs. Proactively identify gaps and historical documentation issues to ensure a smooth, repeatable, and optimized annual audit cycle.
Partner with multi-functional leaders in IT, Engineering, and Finance to embed practical risk management practices into system designs without hindering delivery speed.
Coordinate closely with Internal Audit to ensure business readiness and alignment on audit expectations during significant system changes.