Senior IT Compliance Analyst

Ametek, Inc. • Easttown Township, PA

3d

About The Position

The Senior IT Compliance Analyst leads and coordinates the organization’s IT compliance, regulatory, certification, and audit programs. The role serves as the primary compliance lead for SOX IT General Controls (ITGC) compliance and UK Cyber Essentials Plus certification, and supports regulatory audits and certification initiatives. It also supports strategic programs including CMMC and European cybersecurity regulations such as NIS2 and the Cyber Resilience Act, as well as business units pursuing elective certifications such as SOC 2 and ISO 27001.

The position works with IT Operations, Audit Services, Legal, Risk Management, Product Development, Engineering, Human Resources, and business stakeholders to ensure compliance obligations are understood, implemented, tested, and monitored. It translates complex requirements into practical business controls and supports documentation, assessments, evidence collection, remediation, reporting, and continuous improvement across multiple frameworks.

Requirements

• Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Accounting, Business Administration, Compliance, Audit, or a related field.
• 4–8+ years of experience in IT Compliance, IT Audit, Information Security, Risk Management, or Governance, Risk & Compliance (GRC).
• Demonstrated experience leading SOX ITGC compliance programs.
• Experience coordinating external audits and certification assessments.
• Strong understanding of IT controls, cybersecurity principles, and regulatory compliance requirements.
• Experience working with multiple compliance frameworks simultaneously.
• Excellent written, verbal, analytical, and presentation skills.
• Strong project management and stakeholder management abilities.
• Legal right to work in the United States on a full-time basis without employer sponsorship now or in the future.

Nice To Haves

• CISA, CISM, CRISC, or CISSP certification.
• ISO 27001 Lead Implementer or Lead Auditor certification.
• CMMC CCP (Certified CMMC Professional) certification.
• Experience with SOX, COBIT, NIST CSF, NIST 800-53, NIST 800-171, SOC 1, SOC 2, ISO 27001, UK Cyber Essentials Plus, NIS2, the Cyber Resilience Act, GDPR, or PCI DSS.
• Experience using ServiceNow, Microsoft Purview, Oracle, SAP ECC and S/4, Navision, HFM, OneStream, or SSRS.

Responsibilities

• Serve as the primary coordinator for IT SOX compliance activities and manage the annual ITGC assessment program.
• Coordinate testing and evidence collection with Internal Audit, External Audit, and IT control owners.
• Track control deficiencies, remediation plans, and management responses; prepare executive reporting on compliance status, findings, and remediation progress.
• Coordinate annual UK Cyber Essentials Plus certification processes for in-scope businesses, readiness assessments, remediation, certification relationships, documentation, renewals, and program updates.
• Support the CMMC program, including NIST 800-171 control implementation, testing, evidence collection, assessments, readiness reviews, gap identification, remediation strategies, and related documentation such as SSPs, policies, procedures, and POA&Ms.
• Monitor CMMC requirements and associated DoD guidance.
• Support readiness for European cybersecurity regulations including NIS2, the Cyber Resilience Act, GDPR-related cybersecurity obligations, and other emerging EU cyber and technology regulations.
• Assist with regulatory gap assessments, control mapping, remediation planning, compliance impact evaluation, obligations inventories, regulatory tracking, and applicable reporting and documentation.
• Support business units pursuing SOC 2, ISO 27001, and customer-driven security certifications through readiness assessments, gap analyses, control design and implementation, testing, evidence management, and assessment coordination.
• Develop and maintain IT compliance control documentation, compliance inventories, obligations registers, and control libraries.
• Map controls across regulatory and certification frameworks to reduce duplication and improve efficiency.
• Evaluate control effectiveness, identify process improvements, and support continuous compliance monitoring.
• Support enterprise risk management by identifying compliance risks and recommending mitigation strategies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior