IT Audit & Compliance Associate

Exzeo Group, Inc; Tampa (FL); Hybrid; USD 65,000 - 90,000; Full time

Benefits offered by this job

Employer-paid health, dental, vision,

Life and disability insurance

Flexible paid time off

401(k) match

Bonus potential

Job summary

Exzeo Group, Inc is seeking an IT Audit & Compliance Associate to support internal and external audits by collecting, organizing, and tracking audit documentation and evidence. You will coordinate requests, monitor progress, and liaise with business and IT teams to ensure timely deliverables.

The role also supports IT control documentation, risk assessments, vendor due diligence, remediation tracking, and management reporting.

Qualifications

• Bachelor's degree in Business, Information Systems, Accounting, Finance preferred.
• 1–2 years of IT audit, compliance, risk management, governance, or similar control-focused environment experience required.
• Experience with SOC, SOX, or regulatory audits is a plus.
• Proficiency in Excel and standard MS Office tools.

Responsibilities

• Coordinate IT audit and compliance activities (SOX, SOC 1, SOC 2, OIR).
• Collect, organize, validate, and maintain audit documentation and evidence.
• Monitor control owners' progress and remediation items; escalate overdue items.

Skills

Organizational skills

Communication skills

Attention to detail

Multitasking

Analytical thinking

IT audit knowledge

Education

Bachelor's degree in Business, Information Systems, Accounting, Finance

Tools

Microsoft Excel

Microsoft Teams

Microsoft PowerPoint

Microsoft Word

JIRA

Job description

JOB SUMMARYThe IT Audit & Compliance Associate is responsible for supporting internal and external audit activities through the collection, organization, and tracking of audit documentation and compliance evidence. This position coordinates audit requests, maintains audit records and status trackers, monitors outstanding items, and follows up with business and technology teams to ensure timely completion of audit deliverables. The role serves as a liaison between auditors and internal stakeholders, vendors, and regulators, helping to facilitate audit readiness and support ongoing compliance efforts. The position also supports IT control documentation, risk assessments, vendor due diligence, remediation tracking, and management reporting. This position requires strong organizational skills, attention to detail, effective communication, and the ability to manage multiple priorities while driving accountability across teams.ESSENTIAL DUTIES & RESPONSIBILITIESCoordinate IT audit and compliance activities, including SOX, SOC 1, SOC 2, OIR, and other regulatory examinations.Request, collect, organize, validate, and maintain audit documentation and supporting evidence from business and IT teams.Monitor control owners' progress on completing audit-related tasks and remediation items.Escalate overdue items and provide regular status updates to management, including audit dashboards and management reports.Maintain audit calendars, status reports, action-item logs, and evidence repositories.Serve as the primary point of contact for collecting information requested by auditors and as a liaison among business owners, IT teams, auditors, vendors, and regulators.Schedule meetings and coordinate communications between auditors and internal teams.Assist with customer and regulatory audit requests by gathering required documentation.Assist with documenting and maintaining IT controls, policies, standards, and procedures.Support risk assessments and maintain risk registers and remediation tracking.REQUIRED SKILLS & EXPERIENCEStrong organizational and follow-up skills, with demonstrated analytical and problem-solving ability.Ability to manage multiple requests and deadlines simultaneously.Excellent written and verbal communication skills.Comfortable working with technical and non-technical teams.Demonstrate a foundational understanding of IT infrastructure, databases, web technology and security frameworks.Proficiency with Microsoft Excel, Word, PowerPoint, Teams, and collaboration tools.Experience maintaining trackers, spreadsheets, and documentation repositories.Exposure to IT audits, compliance, SOC, SOX, or risk management processes is preferred but not required. Knowledge of COSO, NIST, ISO 27001, and vendor risk management is also preferred.Proficiency using JIRA or similar governance, risk, compliance, or workflow tools is a plus.EDUCATION & TRAININGBachelor's degree in Business, Information Systems, Accounting, Finance, or a related field preferred.1-2 years of relevant experience in an IT audit, compliance, risk management, internal audit, governance, or similar control-focused environment required.To foster Exzeo’s commitment to creating a collaborative work environment, remote workers will be required to report to a central office location for one week every quarter for collaboration, team building, and educational exercises.Exzeo offers 100% employer-paid health, dental, vision, life, and disability insurance for employees, a flexible paid time off plan, a 401(k) match, and bonus potential.