IT Compliance Analyst
22 hours ago
Jericho
About the Role We are seeking an experienced IT Compliance Analyst to play a pivotal role in strengthening and scaling our IT Governance, Risk, and Compliance (GRC) program. This position sits at the intersection of IT, Finance, and Security and is critical to ensuring audit readiness, control effectiveness, and regulatory compliance across enterprise systems and cloud environments. This is not a checkbox role. You will own key components of SOX ITGC and PCI compliance, act as a primary liaison with auditors, and drive continuous improvement through smarter controls, better documentation, and increased automation. Success in this role means fewer audit findings, stronger controls, and a more resilient compliance posture. What You’ll Do Audit & Compliance Execution • Lead and support SOX ITGC and PCI compliance activities end-to-end, including walkthroughs, evidence collection, and control testing, • Serve as a key point of contact for internal and external IT audits, ensuring timely, accurate, and high-quality deliverables, • Track audit findings, manage remediation plans, and validate issue closure, • Own recurring compliance processes such as User Access Reviews (UARs), Change Management, and Backup/Disaster Recovery controls, • Evaluate existing IT controls and recommend enhancements aligned with SOX, NIST, COBIT, and ISO 27001, • Partner cross-functionally with IT, Finance, and Security teams to embed compliance into day-to-day operations, • Maintain and enhance IT policies, standards, and control documentation with strong version control, • Ensure audit evidence retention meets regulatory and company standards, • Develop compliance metrics, dashboards, and executive-ready reporting, • Identify inefficiencies and drive initiatives that reduce audit risk and operational friction What You Bring Experience & Knowledge • 4–7 years of experience in IT compliance, IT audit, or ITGC-focused roles, • Hands-on experience with SOX ITGC, access controls, and change management, • Experience supporting audits in ERP environments (Oracle, SAP, JD Edwards), • Exposure to PCI DSS and regulated, transaction-heavy environments, • Strong understanding of IT control frameworks (SOX, NIST, COBIT, ISO 27001), • Ability to manage multiple stakeholders and competing priorities, • High attention to detail with a pragmatic, risk-based mindset, • Bachelor’s degree in IT, Computer Science, Business, or related field, • Certifications such as CISA, CRISC, or Security+ Why This Role This is an opportunity to step into a high-visibility, high-impact role where your work directly influences audit outcomes, risk posture, and operational maturity. You’ll have ownership, autonomy, and the runway to help modernize how IT compliance operates — moving from reactive to strategic. If you’re someone who has run audits, challenged controls, and wants to leave systems better than you found them, this role is built for you. The expected salary range for this position is $80,000 -$100,000. The actual compensation will be determined by experience and other factors permitted by the law. To ensure that we remain an employer of choice, we offer comprehensive and competitive health, wellness, and other benefits to regular and full-time team members. Benefits vary by location, average hours, and time with the company. Benefits for this location include*: • Medical, dental, vision, life and disability insurance for the associate and family (if applicable), • Flexible Spending Account, • Health Savings Account, • 401k retirement program, • Mental health resources / Employee Assistance Program, • Flexible paid vacation time, • 6 paid holidays, • 30% employee discount across our family of brands California residents – please see our ___