Job Description

We are looking for a detail-oriented and proactive IT Audit & Compliance Analyst to join our team. The ideal candidate will have hands-on experience in IT General Controls (ITGC), IT Application Controls (ITAC), and SOC 2 audit/compliance processes. You will be responsible for conducting control assessments, identifying risks, and supporting external/internal audits to ensure our systems meet regulatory and organizational compliance standards.

Key Responsibilities:

Perform ITGC and ITAC assessments including access controls, change management, backup, and recovery.

Conduct SOC 2 Type I & Type II readiness assessments and audits.

Assist in scoping, planning, and executing IT compliance audits and reviews.

Work with cross-functional teams to perform control walkthroughs and test design and operating effectiveness.

Identify control gaps and recommend remediation actions.

Coordinate with internal stakeholders and external auditors for evidence collection and process clarifications.

Maintain audit documentation and support reporting for regulatory or client requirements.

Ensure compliance with applicable frameworks such as SOC 2, SOX, ISO 27001, etc.

Support continuous improvement initiatives in risk and compliance processes.

Primary Skills:

Strong knowledge of ITGC and ITAC testing

Hands-on experience with SOC 2 audits (Type I and II)

Familiarity with Trust Services Criteria and audit lifecycle

Understanding of risk and control frameworks

Good knowledge of access controls, change management, and IT operations

Proficiency in audit documentation and reporting

Knowledge of GRC tools like Archer, AuditBoard, ServiceNow (preferred)

Strong communication and documentation skills

Educational Qualifications:

Bachelor's degree in Information Technology, Computer Science, or a related field

Preferred: Certification like CISA, ISO 27001 LA, or similar (not mandatory but a plus)

Job Type: Full-time

Work Location: In person