Analyst- IT Compliance

Roles & Responsibilities:

• Control & Evidence Management. Execute assigned IT compliance control activities in accordance with established methodologies and timelines. Maintain accurate control records, including test procedures, results, and evidence. Prepare clear, complete workpapers supporting conclusions, exceptions, and recommendations. Ensure traceability between controls, systems, applications, and compliance requirements. Proactively engage leadership to clarify exceptions and improve control quality. Compliance Monitoring & Issue Management, Identify control exceptions and evaluate them using defined criteria, including root cause analysis. Log and track control deficiencies and remediation actions through closure. Monitor remediation progress and follow up with control owners. Validate remediation evidence prior to issue closure. Audit & Review Support, Support audit readiness by ensuring documentation is current, complete, and aligned with expectations. Respond to audit inquiries and assist with evidence collection and clarification. Reporting & Data Quality • Support preparation of compliance reports and dashboards by ensuring data accuracy and completeness. Assist with testing GRC workflow updates related to usability, process effectiveness, and data integrity.
• 2+ years of experience working within a large audit (Big 4) or professional services company. Experience supporting IT audit, IT compliance, technology risk, or related operational roles. Direct exposure to internal or external audit processes. Bachelors degree in information systems, cyber security, or related field or equivalent experience. Familiarity with industry frameworks (e.g., NIST CSF 2.0, ISO 27001, and CIS Controls). Understanding of common IT control domains (e.g, access management, change management, IT operations, etc.). • Strong analytical skills with exceptional attention to detail and organizational discipline. • Ability to follow structured documents and maintain audit-ready documentation. Experience with GRC platforms or similar compliance tracking tools preferred.
• Strong execution discipline, clear documentation skills, and the ability to collaborate effectively with control owners, business stakeholders, and auditors to ensure consistent / audit-ready compliance outcomes.