Analyst IT Control Compliance (f/m/d)

Digital Realty; Dublin; On-site; EUR 60,000 - 90,000; Full time

Job summary

Digital Realty is seeking an Analyst (f/m/d) in Cyber & IT Control Compliance to assess technology, cybersecurity, and IT controls for proper design and operating effectiveness.

You will validate control alignment with frameworks such as NIST CSF, NIS2, DORA, ISO 27001/27005 and PCI DSS, maintain evidence in ServiceNow IRM, and collaborate with IT, Compliance, and business teams to support audit readiness.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• 2-5+ years in cybersecurity, IT compliance, IT controls, information security, audit or risk.
• Hands-on control assessments, control testing, compliance reviews or validation.
• Understanding of NIST CSF, NIST RMF, EU regulation.
• Familiarity with NIS2, DORA, ISO 27001/27005, PCI DSS and related requirements.
• Experience with GRC platforms, preferably ServiceNow IRM, including records/workflows/reporting.
• Strong analytical, documentation and evidence review skills; detail oriented.
• Ability to communicate control gaps to technical and non-technical stakeholders.
• Strong written/verbal communication; cross-functional collaboration.
• Certs such as Security+, CISA, CRISC, CISM are a plus.

Responsibilities

• Understand and apply NIST CSF, NIS2, DORA, ISO 27001/27005, PCI DSS.
• Interpret and enforce policies, procedures, and standards.
• Maintain control assessment records, evidence, findings, and remediation in ServiceNow IRM.
• Partner with IT, Compliance and business teams to gather evidence.
• Support audit readiness by maintaining documentation and evidence.
• Assist with development and improvement of control templates and reporting.
• Prepare control summaries, dashboards, and status reports for leadership.

Skills

Analytical skills

Documentation skills

Evidence review

Communication skills

Cross-functional collaboration

Regulatory knowledge

Control assessments

Auditing/testing experience

Clear gap reporting

Education

Bachelor’s degree in Cybersecurity, Computer Science, or a related field

Tools

ServiceNow IRM

Job description

Job Description

Analyst (f/m/d), Cyber & IT Control Compliance supports the assessment of technology, cybersecurity, and IT controls to ensure they are properly designed, implemented, and operating effectively. This role helps validate control alignment to identify risks, supports remediation tracking and reporting, and works with cross-functional teams to maintain compliance with internal standards and frameworks such as NIST, NIS2, DORA, ISO 27001/27005, and PCI DSS, using ServiceNow IRM or similar GRC tools.

Responsibilities

• Understanding of NIST CSF and frameworks and regulations such as NIS2, DORA, ISO 27001/27005, and PCI DSS.
• Ability to interpret, apply, and ensure compliance with established policies, procedures, and standards.
• Maintain control assessment records, evidence, findings, and remediation items in ServiceNow IRM or similar GRC tools.
• Partner with IT, Compliance and business teams to gather evidence and support assessment activities.
• Support audit, compliance, and regulatory readiness by maintaining accurate control documentation and assessment evidence.
• Assist with development and improvement of control assessment templates, procedures, and reporting processes.
• Prepare control compliance summaries, dashboards, and status reports for leadership and governance forums.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• 2-5+ years of experience in cybersecurity, IT compliance, IT controls, information security, audit, risk, or related functions.
• Hands-on experience supporting or performing control assessments, control testing, compliance reviews, or control validation activities.
• Basic to strong understanding of technology and cybersecurity control frameworks, including NIST CSF and NIST RMF,EU regulation.
• Familiarity with applicable regulations and standards such as NIS2, DORA, ISO 27001/27005, PCI DSS, and related security/control requirements.
• Hands-on experience with GRC platforms, preferably ServiceNow IRM, including control records, workflows, issue tracking, and reporting.
• Strong analytical, documentation, and evidence review skills with attention to detail.
• Ability to communicate control gaps and compliance issues clearly to technical and non-technical stakeholders.
• Strong written and verbal communication skills and ability to work cross-functionally with Cybersecurity, IT, Risk, Compliance, and Audit teams.
• Relevant certifications such as Security+, CISA, CRISC, or CISM are a plus.