IT Risk & Compliance Analyst
Core
Coordinate IT compliance, audit readiness, cybersecurity findings management, and risk activities across Information Security, IT, Internal Audit, and business stakeholders.
Role type
IT Risk & Compliance Analyst
Builds
Audit readiness, compliance documentation, risk registers, and management reporting
Domain
IT Governance, Risk, and Compliance (GRC) / Cybersecurity
Deliverable
dashboards & analysis
Required skills
IT General Controls (ITGC), SOX compliance, GRC platforms, audit coordination, process documentation, regulatory adherence, stakeholder management
Preferred skills
Optro (AuditBoard) administration, NIST Cybersecurity Framework, ISO 27001, GDPR, automation tools (Power Automate, SQL, Python), CISA/CRISC/CIA/CISSP certification
Technologies
Optro (AuditBoard), ServiceNow GRC, Archer, MetricStream, Jira, Power Automate, SQL, Python
Responsibilities
Coordinate audit and compliance efforts across multiple teams; Support SOX ITGC activities including evidence collection and testing; Administer compliance and risk management systems; Track audit findings and remediation plans; Support internal and external audits and assessments; Map controls to NIST and other frameworks; Identify process improvement opportunities; Prepare management reporting materials.
Seniority
Mid-level, hands-on IC