IT Compliance Analyst

📌 Roles and Responsibilities

📌 Monitor and ensure compliance with IT policies, procedures, and regulatory requirements
📌 Conduct internal audits and assessments to evaluate compliance with standards such as GDPR, HIPAA, SOX, and ISO 27001
📌 Identify gaps in security, data protection, and system controls; recommend corrective actions
📌 Maintain documentation for compliance controls, audit trails, and policy updates
📌 Collaborate with IT, legal, risk, and business teams to support compliance initiatives
📌 Assist in the development and enforcement of IT governance frameworks and internal controls
📌 Support third-party risk assessments and vendor compliance reviews
📌 Stay updated on evolving regulations and compliance standards affecting IT systems and data
📌 Conduct training and awareness sessions for employees on IT compliance policies
📌 Prepare detailed reports and dashboards for internal stakeholders and auditors

📌 Certifications and Qualifications Required

📌 Bachelor’s degree in Information Technology, Cybersecurity, Business, or a related field (required)
📌 Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) (preferred)
📌 Knowledge of compliance standards such as GDPR, HIPAA, PCI-DSS, SOX, or ISO/IEC 27001
📌 2–4 years of experience in IT compliance, audit, or information security
📌 Familiarity with IT risk management frameworks (e.g., NIST, COBIT, COSO)
📌 Strong analytical and investigative skills
📌 Excellent attention to detail and organizational skills
📌 Strong written and verbal communication skills for policy writing and reporting
📌 Experience with GRC tools and compliance tracking software (preferred)
📌 Ability to work independently and manage multiple compliance initiatives simultaneously