Description

As a Risk & Compliance Analyst, you will partner with technology and business teams to perform risk and compliance activities, supporting enterprise security initiatives and external audits. Your work will help improve the organization's security posture and control environment.

Requirements

• Bachelor's degree in Business, Technology, or equivalent work experience
• Support IT audit and compliance assessments with frameworks such as SOC 2, SOX, HITRUST, or PCI DSS
• Assist in planning, executing, and documenting IT audits and control testing
• Evaluate IT general controls (ITGCs), application controls, and security controls
• Prepare clear audit workpapers, reports, and presentations

Responsibilities

• Participate in cross-functional teams for enterprise risk and compliance projects
• Identify, document, test, assess, and remediate IT risk areas and inquiries
• Support execution of risk-based IT assessments and SOC compliance activities
• Perform data integrity, information security risk assessments, and third-party vendor reviews
• Prepare deliverables/reports for senior leadership on IT internal control issues