Sr. IT Compliance Analyst

Danaher Corporation•Coralville, IA

6d•$117,000 - $155,000

About The Position

The Sr. IT Compliance Analyst executes and analyzes control-based activities supporting IDT’s compliance objectives, including General Controls (GC), SOX, PCI-DSS, and information security. As a key contributor and subject matter expert on the IT Governance, Risk and Compliance Team, the analyst works independently with technical and business stakeholders, serves as the SOX Champion, and communicates outcomes and risks to senior stakeholders. The role also contributes to developing and maintaining trusted processes and procedures that minimize risk to IDT’s mission. The position reports to the Sr. IT GRC Manager and is part of the IDT IT-GRC Department. The posting identifies Coralville, Iowa or Fargo, North Dakota as onsite locations, and also states that the role is eligible for a remote work arrangement from home. The role leads IT General Controls execution across key domains, including user access management and change management/CAB participation; leads vendor management and third-party risk assessments; coordinates disaster recovery activities and root-cause analysis for business-impacting events; supports audits; presents compliance and remediation results to senior stakeholders; and coaches junior team members. Travel of up to 10% is required.

Requirements

Bachelor’s degree required.
7 or more years working on a GRC team or in a related technical discipline.
Experience working with or supporting change management and participating in a Change Advisory Board (CAB).
5 or more years of experience working in or supporting User Access Management.
At least 5 years of experience working with compliance or governance standards, including SOX, PCI, HIPAA, GDPR, and general compliance, and supporting internal or external audits.
Travel required, up to 10% of the time.

Nice To Haves

Experience creating or developing programs to bridge or eliminate organizational gaps.
Experience using continuous improvement methods and frameworks to identify improvement areas and create GRC efficiency opportunities.
Experience assisting with or supporting Third-Party Risk Management activities related to risk assessments and compliance-gap analysis.

Responsibilities

Lead IT General Controls execution across key domains, such as user access management and change management/CAB participation, ensuring controls are designed, operate effectively, and have audit-ready evidence.
Maintain IT-GRC policies, procedures, and documentation, coordinating updates with external policy owners.
Lead vendor management and third-party risk assessment activities, including annual reviews.
Coordinate completion of customer questionnaires and assessments by synthesizing input from technical and business stakeholders.
Coordinate and manage disaster recovery activities with internal and external teams, including planning, execution support, outcome documentation, and gap identification.
Lead root-cause analysis for business-impacting events, define corrective actions, and track remediation to completion.
Prepare for and support internal and external audits.
Present risk, compliance, audit, and remediation status and results to senior stakeholder groups; escalate issues and propose solutions as needed.
Provide peer-to-peer support across IT and the business; train and coach junior team members.