Job Description:

Job Summary

The IT Compliance Analyst is responsible for administering and supporting the organization's IT compliance and governance programs. This position partners with auditors, process owners, business stakeholders, and third-party vendors to ensure compliance with regulatory, corporate, and cybersecurity requirements. The Analyst coordinates audits, manages compliance documentation, maintains governance processes, and supports continuous improvement efforts related to SOX, vendor risk management, and IT controls.

Responsibilities

• Coordinate and support internal and external audits by gathering requirements, providing evidence, and facilitating auditor requests.
• Maintain and monitor a centralized repository for audit evidence, compliance documentation, and control testing results.
• Administer and document SOX IT controls, compliance activities, policies, standards, and procedures.
• Conduct compliance reviews and assist with remediation efforts resulting from audit findings.
• Manage vendor risk assessment (VRA) processes and validate vendor compliance requirements, including SOC reports and supporting documentation.
• Maintain contracts repositories and compliance-related documentation.
• Track and monitor compliance findings, corrective actions, and remediation activities through completion.
• Support governance, risk, and compliance (GRC) programs and related reporting activities.
• Advise business units regarding compliance requirements, vendor onboarding reviews, and control expectations.
• Identify opportunities to improve internal controls, compliance processes, and audit readiness.
• Monitor regulatory, compliance, and governance requirements affecting IT operations.
• Assist with user access reviews and application compliance activities supporting SOX-regulated systems
• Maintain compliance with Health, Safety, and Environmental (HSE) policies by attending all required HSE training sessions, safety meetings, and always utilize proper Personal Protective Equipment (PPE)
• Other duties as assigned

Job Qualifications

• Minimum 3+ years of experience in IT compliance, IT audit, risk management, governance, or related discipline.
• Experience supporting SOX compliance programs and external audit activities.
• Working knowledge of IT compliance frameworks and standards, including SOX, SOC 2, NIST, and CIS.
• Experience managing audit evidence, audit responses, and compliance documentation.
• Familiarity with Governance, Risk, and Compliance (GRC) tools such as ZenGRC, OneTrust, Archer, or Whistic.
• Understanding of vendor risk management and third-party compliance practices.
• Strong organizational skills and attention to detail.
• Strong written and verbal communication skills.
• Proven analytical and problem-solving capabilities.

Physical Demands

The physical demands described here represent those required for an employee to successfully perform the role's essential functions. Reasonable accommodation may be made for individuals with disabilities to perform their major responsibilities.

While performing the duties of this job, the employee is regularly required to sit, stand, or walk; use hands to finger, handle, or feel; reach with hands and arms; stoop or bend; and talk or hear. The employee must occasionally lift and/or move up to 20 lbs.

Work Environment

The work environment characteristics described here represent environmental conditions an employee will encounter while performing the role's essential functions. The noise level in some work environments can be moderate and an employee may encounter extreme weather conditions while performing major duties. Reasonable accommodation may be provided for individuals with disabilities to perform their major responsibilities.

Disclaimer

The information provided in this job description indicates the general nature and level of work performed by employees within the role's classification. This job description is not to be interpreted as a comprehensive inventory of all duties, responsibilities, qualifications required of employees assigned to this role.