Senior IT Auditor

Job Description

SR. COMPLIANCE ANALYST (IT) | LARGE MEDIA COMPANY | $60-$65 PER HOUR | 100% REMOTE - PHILADELPHIA, PA |

Client Large Media Conglomerate

Location: 100% Remote (Must reside in US)

Position: Sr. Compliance Analyst -IT Analytics and Assurance (Sr. IT Auditor)

Pay: $60-$65 per hour (W2)

Duration: 1 year (Extension Likely)

Role Overview

Join the Global Streaming Technology Analytics and Assurance team to support compliance efforts and evaluate how evolving technologies impact our compliance posture. This role focuses on ensuring adherence to key frameworks, streamlining audits, and integrating compliance into cloud and DevSecOps processes.

Key Responsibilities

Compliance & Security Oversight:

• Ensure compliance with PCI, SOX, and SOC 2 Type II frameworks.
• Collect and validate evidence for control requirements across business units.
• Oversee technical compliance areas: access management (UARs), asset management, secure development lifecycle, encryption, SoD, configuration and vulnerability management, secrets rotation.
• Recommend security best practices for cloud-based infrastructure.
  
  

Cloud & Infrastructure Compliance

• Evaluate compliance across AWS, GCP, and Azure, including EC2, databases, and storage.
• Assess containerized environments (Kubernetes, Docker).
• Contribute to automating compliance monitoring in cloud environments.
  
  

CI/CD & DevSecOps Integration

• Partner with DevOps and security teams to embed compliance into CI/CD pipelines (GitHub, Jenkins, Terraform, Atlantis).
• Develop Compliance as Code and Policy as Code solutions.
• Automate compliance evidence collection across tools and platforms.
  
  

Audit & Process Optimization

• Support internal and external audits; ensure controls are implemented and well-documented.
• Create technical documentation aligned with compliance needs.
• Track compliance deliverables and project milestones.
  
  

Qualifications

• 5 years of hands-on experience in technical compliance, cybersecurity, or cloud governance.
• Direct experience collecting and analyzing evidence for audits.
• Proficient in PCI DSS, SOX, and/or SOC 2 Type II frameworks.
• Strong understanding of AWS, GCP, Azure, and associated security practices.
• Experience with Kubernetes, Docker, and container security.
• Familiarity with CI/CD tools and infrastructure-as-code practices.
• Scripting/API skills for compliance automation preferred.
• Knowledge of ServiceNow, CMDBs, or platforms like LogicGate a plus.
• Big 4 consulting experience strongly preferred.
  
  

#PCFA #PCIT #COMPLIANCE