IT Security & Compliance Analyst

IT Security & Compliance Analyst

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field.
• Master’s degree or professional certifications (e.g., CISA, CISSP, CPA) preferred.
• At least 5 yrs of experience in IT audit, risk management, or compliance, with a focus on Sarbanes-Oxley compliance in a publicly traded company or consulting firm.
• Familiarity with IT control frameworks, regulatory requirements, and industry standards, including COSO, COBIT, and SOX Section 404.
• Strong analytical and problem-solving abilities.
• Good understanding of IT controls, cybersecurity concepts, and regulatory compliance requirements.
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint) and audit tools.
• Strong attention to detail.
• Ability to work independently and as part of a team.
• Excellent communication skills, both verbal and written.
• Ability to prioritize and manage multiple tasks in a fast-paced environment.

Responsibilities

• Evaluate IT systems and business processes to identify risks, weaknesses, and areas for improvement.
• Review IT policies, procedures, and security standards to ensure compliance with industry standards and regulations.
• Assist with the implementation and execution of internal controls such as Access Reviews, Privileged Activity Reviews, etc.
• Evaluate the design and operating effectiveness of IT controls across system configurations, change management processes, and backup/recovery.
• Collaborate with cross-functional teams, including IT, finance, legal, and internal audit, to identify control gaps, remediate deficiencies, and strengthen overall control environment.
• Prepare clear, concise, and actionable audit findings, recommendations, and assist with management responses.
• Present audit results to IT and business management in a manner that highlights key risks and areas for improvement.
• Work with other members of the audit team to ensure comprehensive audit coverage and effective communication.
• Support other team-members in compliance assessments of IT system implementations and upgrades.

Preferred Qualifications

• Desired technical stack experience – Oracle Cloud, Windows, Linux, Oracle DB and IT infrastructure.