IT Compliance Analyst

Position Summary

The IT Compliance Analyst serves as a member of the IT Compliance team, assisting day-to-day governance, risk, and compliance (GRC) operations, PCI and coordination with internal and external auditors. This role drives end-to-end execution of SOX audit and PCI programs, ensures IT control effectiveness across key systems (ERP, infrastructure, and cloud), and supports the design of scalable, automated compliance processes. The ideal candidate has solid experience managing SOX ITGC testing cycles, coordinating control owners, and identifying process improvements that reduce audit risk and increase operational efficiency.

Key Responsibilities:

Audit & Assessment Leadership

• Serve as a liaison for internal and external IT audits, ensuring audit readiness and consistent, high-quality deliverables.
• Assist evidence collection, walkthroughs, and control testing; review documentation prepared by analysts for accuracy and completeness.
• Manage tracking of findings, remediation plans, and follow-up validation until closure.
• Provide management with clear reporting on control of performance and issue trends.

Governance, Risk & Compliance Operations

• Lead recurring IT compliance processes, including User Access Reviews (UARs), Change Management, and Backup/DR control monitoring.
• Evaluate existing controls and recommend enhancements aligned with SOX, NIST, or ISO (27001, 9001, etc) standards.
• Support automation and integration of compliance activities through GRC tools or analytics dashboards.
• Coordinate with IT, Finance, and Security teams to embed compliance into day-to-day operations.

Policy, Documentation & Training

• Maintain and update IT policies, standards, and control documentation with appropriate versioning.
• Facilitate periodic policy attestations and awareness training sessions for IT staff.
• Ensure evidence retention and audit documentation meet company and regulatory expectations.

Metrics, Reporting & Continuous Improvement

• Develop and present compliance dashboards, control metrics, and executive summaries to management.
• Identify control inefficiencies and propose remediation or automation opportunities.
• Contribute to the strategic roadmap for IT compliance maturity and audit optimization.

The expected salary range for this position is $80,000 -$100,000. The actual compensation will be determined by experience and other factors permitted by the law.

To ensure that we remain an employer of choice, we offer comprehensive and competitive health, wellness, and other benefits to regular and full-time team members. Benefits vary by location, average hours, and time with the company.

Benefits for this location include*:

• Medical, dental, vision, life and disability insurance for the associate and family (if applicable)
• Flexible Spending Account
• Health Savings Account
• 401k retirement program
• Mental health resources / Employee Assistance Program
• Flexible paid vacation time 
• 6 paid holidays
• 30% employee discount across our family of brands
• Potential eligibility for annual merit-based wage increase, if applicable

*Exact benefit terms, conditions, and eligibility requirements are governed by official plan documents and are subject to applicable law. In addition, the Company reserves the right to change the terms and conditions and to terminate these and other plans and programs at any time.

California residents – please see our California Privacy Rights Notice for Job Applicants

Education:

• Bachelor’s degree in Information Technology, Computer Science, Business, or related field required.
• (Preferred) CISA, CRISC, or Security+ certification.

Experience:

• 4–7 years of experience in IT compliance, audit, or ITGC management.
• Strong background in SOX ITGC, access control, change management, or system security reviews.
• Experience with ERP platforms such as Oracle, SAP, or JD Edwards and familiarity with cloud or GRC tools (Fastpath, Pathlock, Helix, Smartsheets etc.).

Skills & Competencies:

• Deep understanding of IT control frameworks (SOX, NIST, COBIT, ISO 27001).
• Excellent communication, organization, and stakeholder management skills.
• Strong analytical and problem-solving mindset with attention to detail.
• Advanced proficiency with Microsoft Excel, SharePoint, Teams, and report generation tools.