Information Technology Compliance Manager

BayOne Solutions; Chicago (IL); On-site; USD 95,000 - 130,000; Full time

Job summary

BayOne Solutions in Chicago seeks an IT Compliance Specialist, Assurance to independently perform control testing and documentation across ISO 27001, PCI DSS, SOC 2, and SOX ITGC. This role involves coordinating testers, ensuring evidence traceability and producing dashboards for assurance KPIs.

You will manage issues and policy exceptions in ServiceNow IRM, design and execute UAT, and contribute to IRM data and reporting as needed.

Qualifications

• Experience in planning and executing control tests with evidence validation and traceability.
• Experience managing IRM records for issues and policy exceptions.
• Familiarity with ISO 27001, PCI DSS, SOC 2, and SOX ITGC controls.

Responsibilities

• Plan and execute control tests; validate evidence sufficiency and traceability.
• Own IRM records for issues and policy exceptions; ensure updates and closure.
• Design UAT scripts for IRM changes; coordinate testers; track defects to resolution.
• Perform data quality routines; reconcile control catalogs, ownership, and status fields.
• Create or enhance standard reports/dashboards for assurance KPIs and trends.
• Partner with system/control owners to remediate findings and document remediation.
• Contribute to method improvements (test templates, sampling guidance, quality checklists).

Skills

Control testing

ISO 27001

PCI DSS

SOC 2

SOX ITGC

IRM

ServiceNow

UAT design

Data reporting

Power BI

Excel

Communication

Time management

Tools

ServiceNow

IRM

Power BI

Excel

Job description

The IT Compliance Specialist, Assurance independently performs control testing

and documentation across ISO 27001, PCI DSS, SOC 2, and SOX ITGC. Manages issues and policy

exceptions in ServiceNow Integrated Risk Management (IRM), designs and executes UAT, and contributes

to IRM data/reporting (Data Analyst/Business Analyst/QA/Test Engineer responsibilities as needed).

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Plans and executes control tests; validates evidence sufficiency and traceability.
• Owns IRM records for issues and policy exceptions; ensures timely updates and closure.
• Designs UAT scripts for IRM changes; coordinates testers; tracks defects to resolution.
• Performs data quality routines; reconciles control catalogs, ownership, and status fields.
• Creates or enhances standard reports/dashboards for assurance KPIs and trends.
• Partners with system/control owners to remediate findings:documents remediation
• Contributes to method improvements (test templates, sampling guidance, quality checklists)

ADDITIONAL FUNCTIONS and RESPONSIBILITIES

• Performs other duties as assigned.
• Travel as required

Skills:

• Solid understanding of control testing methods, including sampling, walkthroughs, and reperformanc
• Working proficiency with Service Now, IRM, including records manageement, workflows, UAT and reporting
• Strong analytical and problem-solving skills: intermediate proficiency in Excel, Power BI, or equivalent tools
• Clear and effective communication with control owners, ensuring consistent and high-quality documentation
• Ability to apply conceptual thinking and work, independently while managing multiple priorities
• Strong time management and organizational skills to handle competing tasks effectively
• Ability to comply with company policies and applicable laws and regulations
• Comfortable with occasional travel and participation in meetings (virtual or in-person)
• Solid understanding of control testing methods, including sampling, walkthroughs, and re
• performance
• Clear and effective communication with control owners, ensuring consistent and high-quality