IT Risk and Compliance Analyst

Sirius Staffing is seeking an IT Risk and Compliance Analyst for a 6 month contract role in Lutz, FL. Please contact us today for more information.

We are seeking an experienced IT Risk & Compliance Analyst to support compliance, controls, and audit activities across SOX in-scope systems and related IT processes. This role requires strong experience assessing IT controls, identifying gaps, driving remediation efforts, and supporting governance and compliance programs within a complex enterprise environment. This position is onsite 4 days per week in Midtown.

Required Skills & Experience:

• 3 years in IT security, IT audit, or IT controls/compliance
• Experience identifying control gaps, drafting remediation plans, and driving remediation through completion
• Strong experience with SOX controls and requirements
• Assurance experience: IT audit/compliance, compliance assessments, IT governance, GRC tools
• Bachelor’s degree (required)

Nice-to-Have Skills

• CISA or CRISC certifications
• Experience with PCI controls and NIST Cybersecurity Framework
• Experience with any of the following tools:
• SAP, ServiceNow, AuditBoard, Splunk, Tenable, CyberArk
• Experience with risk assessments and vulnerability assessments

Job Responsibilities

• Coordinate SOX control implementation for in-scope systems and processes, ensuring timely completion of related remediation efforts
• Validate evidence, facilitate stakeholder discussions, and help maintain compliance with SOX, PCI, and contractual/regulatory requirements
• Collect and sample evidence for compliance; escalate issues to senior management as needed
• Administer IT Compliance Management Systems and GRC tools, and support implementation of new technology-based tools
• Support the collection, review, approval, and organization of compliance artifacts
• Assist with information-sharing activities, metrics tracking, and survey management across partner utilities
• Document non-compliance issues, provide recommendations, and guide remediation actions
• Monitor and report exceptions, risks, and exposures to IT senior leadership
• Conduct fact-based assessments of new and existing systems and technologies
• Evaluate effectiveness of regulatory compliance controls and provide subject matter expertise to stakeholders

Sirius Staffing is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to characteristics such as race, color, national origin, religion, gender, age, marital status, disability, veteran status, citizenship status, sexual orientation, gender identity, or any other status protected by law