Internal Job Title: Senior IT Control Analyst
Onsite Location & Status: League City, Texas - Datacenter | Full-time, Salaried
Reports to: Director, Governance, Risk & Compliance
Vacancies: Two
What You'll Do- Evaluate current IT and cybersecurity processes, identify control gaps, and help redesign controls for greater efficiency and automation
- Document and maintain risk control matrices, risk assessments, minimum control standards, and the cybersecurity control framework
- Help design, build and organize the control environment within ServiceNow Integrated Risk Management, including workflow automation
- Support SOX/ICFR and IT General Control requirements, user access reviews, SOC 2 activities, regulatory inquiries, and external audits
- Partner with technical teams, control owners, cybersecurity, auditors, and governance groups to translate requirements into sustainable operating processes
- Provide compliance guidance, training, and support while monitoring ongoing control performance
What You Bring- Bachelor's degree in (Cybersecurity, Management Information Systems, or Accounting) preferred or a combination of both relevant designations/ certifications and work experience considered
- Four to six years of relevant experience in cybersecurity, IT governance, technology controls, IT audit, or a related field
- Strong cybersecurity knowledge and the ability to understand how technology processes operate
- Experience evaluating or auditing IT controls and working with frameworks and regulations such as SOX, NIST CSF, COBIT, GDPR, CCPA, or SOC 2
- Ability to work independently, collaborate across a matrixed organization, and communicate effectively with technical and nontechnical stakeholders
- Experience with ServiceNow IRM or a comparable GRC platform is highly valued
Preferred Background- IT auditor, cybersecurity professional, programmer, engineer, or risk professional with experience applying controls to technology processes
- Credentials such as CISA, CRISC, CRMP, CISM, CIA,
- Insurance experience is helpful but not required
Work Schedule and CompensationThe typical schedule is Monday through Friday, 8:00 a.m.-4:30 p.m. Central Time. Additional hours may occasionally be needed to meet critical deadlines; there is no on-call rotation. Occasional travel may be required.
If you enjoy building practical controls, improving processes, and helping technology teams meet complex cybersecurity and regulatory expectations, we encourage you to apply.
