Compliance Analyst

Job Description

Job Description

We are seeking an IT Compliance Analyst to support the implementation and maintenance of compliance programs across a portfolio of applications and systems. This role will partner with compliance, cybersecurity, audit, and technology teams to ensure adherence to regulatory requirements, assist with audit readiness activities, and help strengthen compliance controls across the organization.

The ideal candidate will have experience in IT compliance, IT audit, or cybersecurity governance and possess strong analytical, documentation, and data analysis skills. This individual will play a key role in collecting evidence, evaluating controls, supporting remediation efforts, and assisting with regulatory and compliance initiatives.

• Support the implementation and ongoing maintenance of IT compliance programs.
• Participate in compliance and audit-related projects involving applications, infrastructure, and technology processes.
• Collect, review, and evaluate technical and procedural documentation to demonstrate compliance with regulatory requirements.
• Assist with compliance assessments, audits, investigations, and evidence gathering activities.
• Document and maintain IT controls, policies, standards, and compliance procedures.
• Perform SQL queries and data analysis to support compliance reviews, audits, investigations, and reporting.
• Analyze data and documentation to identify compliance gaps, control deficiencies, and opportunities for improvement.
• Assist with remediation planning and tracking for identified findings.
• Support cybersecurity compliance initiatives related to access management, vulnerability management, and security controls.
• Partner with technology teams to collect and validate compliance evidence.
• Assist with training, awareness, and information-sharing initiatives.
• Maintain compliance program documentation and support continuous process improvement efforts.
• Evaluate existing processes for potential risks and support the implementation of mitigating controls.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 3+ years of experience in IT Compliance, IT Audit, Cybersecurity Compliance, Risk Management, or a related function.
• Understanding of IT regulatory standards and compliance requirements.
• Knowledge of cybersecurity principles, including:
  • Access Management
  • Vulnerability Management
  • Security Controls
  • Risk Assessment
• Familiarity with regulatory frameworks such as:
  • NERC CIP
  • SOX
  • NIST
  • Similar compliance frameworks
• Experience documenting, reviewing, and maintaining IT controls.
• Strong SQL skills with the ability to:
  • Query data
  • Analyze datasets
  • Validate information
  • Support audit and compliance activities
• Understanding of relational databases, data structures, and data integrity concepts.
• Ability to review and interpret data to support compliance investigations and assessments.
• Strong analytical and problem-solving skills.
• Excellent organizational and time management abilities.
• Ability to work independently in a fast-paced environment with minimal supervision.

• Experience working in a regulated industry.
• Previous experience supporting compliance audits or regulatory assessments.
• Experience partnering with cybersecurity, risk, audit, or governance teams.
• Familiarity with compliance evidence collection and audit support processes.
• Knowledge of compliance remediation tracking and control testing methodologies.

• Strong verbal and written communication skills.
• Ability to collaborate effectively across technical and business teams.
• Strong attention to detail and documentation skills.
• Ability to evaluate complex technical information and translate findings into actionable recommendations.
• Self-motivated with a strong desire to learn technical compliance concepts.
• Comfortable working with multidisciplinary teams and stakeholders.

1. IT Compliance or IT Audit experience
2. Knowledge of cybersecurity compliance frameworks (NIST, SOX, NERC CIP, etc.)
3. Strong SQL and data analysis skills
4. IT controls documentation and compliance evidence gathering
5. Analytical problem-solving and investigative abilities
6. Experience working with technical teams and regulatory requirements