IT Compliance Analyst

Must be able to work on our W2. No C2C or sponsorship

Top Required Skills

• Understanding of IT regulatory standards and requirements.
• Knowledge of cybersecurity principles, access management, vulnerability management, and regulatory compliance frameworks (e.g., NERC CIP, SOX, NIST, or similar).
• Ability to document and update IT controls for compliance requirements.
• Strong analytical abilities.
• Working knowledge of SQL databases, including the ability to query, analyze, and validate data using SQL to support compliance, audit, and reporting activities.
• Understanding of relational database concepts, database structures, and data integrity principles.
• Ability to extract, review, and interpret data to support compliance assessments, investigations, and evidence gathering.
• Desire and aptitude to learn technical compliance concepts.
• Understanding of IT regulatory standards and requirements.
• Excellent organization and time management skills.
• Must be highly motivated and able to work effectively under minimal supervision in a fast-paced environment.

What soft skill requirements do you have (team fit and personality requirements)?

• Strong communication skills both verbal and written
• Ability to lead, collaborate, or work effectively in a variety of teams, including multi-disciplinary teams

High Level Project Overview:

The IT Compliance Analyst to assist with implementing and maintaining a compliance program for a group of applications or systems. The IT Compliance Analyst will participate in compliance-related projects, assist with creating effective compliance processes and procedures, and complete compliance-related data requests. The ideal candidate will have a strong understanding of IT regulatory standards and requirements, and a desire to learn technical compliance concepts. Assist with implementing or maintaining a compliance program for a group of applications or systems. Participate in compliance-related projects requiring knowledge of regulatory requirements. Assist with creating effective compliance processes and procedures for systems and applications. Complete compliance-related data requests. Assist with developing plans for remediation. Help identify opportunities for strengthening compliance controls. Raise awareness of current and upcoming policies, regulations, and requirements.

• Working with Experienced Compliance Analysts to leverage both cyber security best practices and apply knowledge of cyber regulatory requirements.
• Working with other internal departments to collect procedural and technical documentation required to demonstrate adherence to cyber requirements.
• Evaluating procedural and technical documentation against compliance obligations to determine relevance and applicability for external auditors and internal investigations.
• Assisting in compliance-related projects requiring basic knowledge of regulatory requirements as well as basic knowledge of security architecture, technology best practices, and business area requirements.
• Assisting with the implementation of training and information sharing sessions.
• Assisting with the development and implementation of compliance processes and procedures for systems and applications.
• Assisting with the evaluation of processes for failure points and assisting with the implementation of controls to mitigate those potential failures.
• Assisting with the assembly of compliance-related data requests.
• Assist with investigations into process failures and assist with developing recommended remediation plans.
• Maintaining policy and program documentation.
• Perform assignments designed to develop work knowledge, skills and abilities requiring application of policies, procedures, techniques and other criteria in carrying out all aspects of the job
• Continue to develop the knowledge, skills, and abilities to reach a higher level of proficiency and work complexity.

Required Years of Experience:

• 3+ years of directly related experience in IT audit or compliance

Education:

• Bachelor in Computer Science, Information Systems, or Cybersecurity