IT Compliance Analyst

View full description

Requirements:

• 5+ years of experience in IT compliance, IT operations, or a related GRC role.
• Exceptional ability to draft clear, concise policies and procedures for end-users.
• Strong understanding of compliance frameworks such as SOC2, HIPAA, HITRUST, and NIST 800-171.
• Familiarity with common IT operations tools like ServiceNow and Jira.
• Proficiency in analytical skills to identify compliance risks and attention to detail.
• Strong written and verbal communication skills for effective collaboration.
• Relevant certifications such as CISA, CRISC, or CCEP are a plus.

Responsibilities:

• Develop, maintain, and revise IT compliance policies and procedures, ensuring alignment with industry best practices and regulatory requirements.
• Assist in planning and executing compliance audits such as SOC2, HIPAA, and HITRUST, including gathering evidence, preparing audit documentation, and liaising with external auditors.
• Conduct regular IT risk assessments, identifying gaps in controls, and recommending mitigation actions.
• Maintain comprehensive documentation to support compliance activities and generate reports for stakeholders.
• Work closely with Security, IT Operations, and Legal teams to facilitate compliance-related initiatives and ensure proper implementation of controls.
• Provide ongoing training to internal teams on compliance obligations and best practices.