IT Audit & Compliance Associate

JOB SUMMARY

The IT Audit & Compliance Associate is responsible for supporting internal and external audit activities through the collection, organization, and tracking of audit documentation and compliance evidence. This position coordinates audit requests, maintains audit records and status trackers, monitors outstanding items, and follows up with business and technology teams to ensure timely completion of audit deliverables. The role serves as a liaison between auditors and internal stakeholders, vendors, and regulators, helping to facilitate audit readiness and support ongoing compliance efforts. The position also supports IT control documentation, risk assessments, vendor due diligence, remediation tracking, and management reporting. This position requires strong organizational skills, attention to detail, effective communication, and the ability to manage multiple priorities while driving accountability across teams.

ESSENTIAL DUTIES & RESPONSIBILITIES

• Coordinate IT audit and compliance activities, including SOX, SOC 1, SOC 2, OIR, and other regulatory examinations.
• Request, collect, organize, validate, and maintain audit documentation and supporting evidence from business and IT teams.
• Monitor control owners' progress on completing audit-related tasks and remediation items.
• Escalate overdue items and provide regular status updates to management, including audit dashboards and management reports.
• Maintain audit calendars, status reports, action-item logs, and evidence repositories.
• Serve as the primary point of contact for collecting information requested by auditors and as a liaison among business owners, IT teams, auditors, vendors, and regulators.
• Schedule meetings and coordinate communications between auditors and internal teams.
• Assist with customer and regulatory audit requests by gathering required documentation.
• Assist with documenting and maintaining IT controls, policies, standards, and procedures.
• Support risk assessments and maintain risk registers and remediation tracking.

REQUIRED SKILLS & EXPERIENCE

• Strong organizational and follow-up skills, with demonstrated analytical and problem-solving ability.
• Ability to manage multiple requests and deadlines simultaneously.
• Excellent written and verbal communication skills.
• Comfortable working with technical and non-technical teams.
• Demonstrate a foundational understanding of IT infrastructure, databases, web technology and security frameworks.
• Proficiency with Microsoft Excel, Word, PowerPoint, Teams, and collaboration tools.
• Experience maintaining trackers, spreadsheets, and documentation repositories.
• Exposure to IT audits, compliance, SOC, SOX, or risk management processes is preferred but not required. Knowledge of COSO, NIST, ISO 27001, and vendor risk management is also preferred.
• Proficiency using JIRA or similar governance, risk, compliance, or workflow tools is a plus.

EDUCATION & TRAINING

• Bachelor's degree in Business, Information Systems, Accounting, Finance, or a related field preferred.
• 1-2 years of relevant experience in an IT audit, compliance, risk management, internal audit, governance, or similar control-focused environment required.

To foster Exzeo’s commitment to creating a collaborative work environment, remote workers will be required to report to a central office location for one week every quarter for collaboration, team building, and educational exercises. 

Exzeo offers 100% employer-paid health, dental, vision, life, and disability insurance for employees, a flexible paid time off plan, a 401(k) match, and bonus potential.