IT Compliance Analyst

TM Floyd is seeking an IT Compliance professional to support enterprise compliance initiatives and help ensure technology practices align with applicable regulatory standards, security requirements, and organizational policies. This opportunity is ideal for someone with a strong understanding of IT compliance, regulatory frameworks, and risk management, with potential emphasis on cybersecurity.

• Must be located in or near Richmond, VA
• Must be Eligible for direct W-2 employment, with no C2C, subcontracting, or H-1B sponsorship

Key Responsibilities

• Support the IT Compliance team with compliance activities, assessments, and ongoing initiatives
• Help ensure IT systems, processes, and controls align with applicable regulatory standards and requirements
• Assist with compliance reviews, risk assessments, control validation, and audit preparation
• Maintain compliance documentation, evidence, policies, and procedures
• Collaborate with IT, cybersecurity, risk management, and other stakeholders to address compliance gaps
• Support the identification, tracking, and remediation of compliance risks and control deficiencies
• Monitor changes in regulatory requirements and industry standards that may impact IT operations
• Contribute to continuous improvement of IT compliance and security practices

Desired Qualifications

• Strong knowledge of IT regulatory standards, compliance frameworks, and control requirements
• Experience supporting IT compliance, risk management, governance, or audit activities
• Understanding of cybersecurity principles, security controls, and risk mitigation practices
• Experience with compliance documentation, evidence collection, and audit support
• Strong analytical, organizational, and communication skills
• Ability to collaborate across technical and business teams to support compliance objectives

The Ideal Candidate:

The ideal candidate is a Richmond, VA–area IT Compliance Analyst with hands-on experience supporting IT governance, risk, and compliance (GRC), regulatory assessments, internal audits, and security control validation. They should have strong knowledge of IT regulatory frameworks and cybersecurity standards, experience gathering audit evidence, maintaining compliance documentation, identifying control gaps, and coordinating remediation efforts with IT and security teams. Strong analytical, organizational, and communication skills are essential, with the ability to translate compliance requirements into practical actions.

***Candidates must be eligible for direct W-2 employment, with no C2C, subcontracting, or H-1B sponsorship.

Interested or know someone who would be a great fit? Send me a message to learn more about this opportunity with TM Floyd!

#Hiring #ITCompliance #Cybersecurity #GRC #ITRiskManagement #RegulatoryCompliance #InformationSecurity #TechnologyJobs #TMFloyd