GRC-Driven IT Security & Compliance Specialist

Spirit Airlines; Little Rock (AR); On-site; USD 110,000 - 160,000; Full time

Job summary

Spirit Airlines is seeking a Sr. IT Security Compliance Analyst to lead governance, risk, and compliance activities, aligning with SOX and PCI requirements across IT and business units.

This role focuses on evidence collection, audit coordination, and policy development while partnering with stakeholders. You will interface with auditors, produce remediation plans, report risk metrics, and guide teams on control implementations.

Qualifications

• 10+ years IT audit, information security, and GRC experience across IT governance, risk, compliance, or operations.
• Experience implementing and utilizing a GRC tool.
• Identity and Access Management experience is a plus.

Responsibilities

• Oversee day-to-day IT security governance, risk, and compliance activities.
• Coordinate internal and external SOX/PCI IT audits.
• Act as liaison between auditors and IT, coordinating information requests and responses.
• Establish and maintain security policies and controls.
• Research and evaluate new security compliance requirements.
• Establish and report technology risk-related metrics.
• Lead technical interviews with stakeholders and leadership.
• Write detailed findings and remediation plans with evidence.
• Ensure compliance with information security standards and policies.
• Advise management on remediation actions to maintain ongoing compliance.
• Conduct risk assessments for assets and third parties.

Skills

GRC

Risk management

Auditing coordination

Identity & access mgmt

Communication skills

Policy development

NIST/ISO knowledge

Education

Bachelor’s degree

Tools

GRC tool

Job description

Spirit Airlines is seeking a Sr. IT Security Compliance Analyst to lead governance, risk, and compliance activities, aligning with SOX and PCI requirements across IT and business units.

This role focuses on evidence collection, audit coordination, and policy development while partnering with stakeholders. You will interface with auditors, produce remediation plans, report risk metrics, and guide teams on control implementations.