Junior IT Compliance Analyst

PRINCIPAL DUTIES AND RESPONSIBILITIES

• Assist with the collection, organization, and maintenance of documentation supporting IT controls.
• Work with IT control owners to obtain evidence necessary to complete control testing.
• Participate in meetings with IT compliance personnel and control owners to coordinate testing activities.
• Assist with analysis of testing results and identification of potential control deficiencies.
• Track remediation activities and follow up with control owners to obtain required evidence.
• Support access certification activities for financially significant systems, including segregation-of-duties reviews.
• Assist with requests from external auditors and Internal Audit related to IT matters.
• Assist in preparing compliance reporting, dashboards, metrics, and management updates.
• Support annual IT scoping activities by gathering information regarding applications, systems, infrastructure, and changes to the IT environment.
• Assist with IT control assessments for new entities, applications, systems, or processes that may be relevant to IT compliance.
• Support IT management in identifying and documenting remediation activities when controls do not meet established requirements.
• Provide regular status updates to IT compliance management regarding testing progress, outstanding requests, identified issues, and remediation activities.
• Assist with maintaining current IT control documentation and procedures as requirements and organizational processes change.
• · Support compliance-related projects and initiatives, including implementation or enhancement of audit and compliance management tools.
• Assist with SAP role and access review activities, including review of potential segregation-of-duties conflicts and documentation of appropriate mitigating controls.
• Perform other duties as assigned.

EDUCATION

• Bachelor’s degree in information systems, Computer Science, Business, Accounting, Finance, or a related field.
• CISA or other relevant certification is preferred but not required.

EXPERIENCE AND REQUIRED SKILLS

• 1–3 years of experience in IT audit, IT compliance, SOX, IT controls, IT risk management, information technology, or a related field; or equivalent directly related work experience.
• Internship or co-op experience in IT audit, compliance, risk, cybersecurity, or related areas may be considered.
• Basic understanding of IT general controls, access controls, change management, and IT operations.
• Strong organizational and analytical skills.
• Strong written and verbal communication skills.
• Ability to manage multiple assignments and meet established deadlines.
• Ability to work effectively with stakeholders at various levels of the organization.
• Strong attention to detail and ability to maintain accurate documentation.
• Proficiency with Microsoft Office applications, particularly Excel and PowerPoint.
• Experience with ERP, enterprise applications, SAP, PeopleSoft, data centers, or other large-scale technology environments is preferred.
• Exposure to COSO, COBIT, SOX, NIST, ISO 27001, or other control frameworks is preferred.
• Experience with audit, GRC, compliance, or workflow management tools is preferred.
• Ability to work independently on assigned responsibilities while seeking guidance when appropriate.
• Demonstrated willingness to learn and develop expertise in IT compliance.