IT Audit & Compliance Associate

Exzeo; Tampa (FL); Hybrid; USD 60,000 - 90,000; Full time

Benefits offered by this job

Employer-paid health insurance (health

Flexible PTO

401(k) match

Bonus potential

Job summary

Exzeo is seeking an IT Audit & Compliance Associate to support audit activities, collect and organize evidence, and coordinate with business and IT teams to ensure timely deliverables.

You will act as a liaison among auditors, vendors, regulators, and internal stakeholders, maintaining control documentation, risk registers, and remediation tracking. Remote workers visit office quarterly.

Qualifications

• Bachelor's degree and 1–2 years IT audit, compliance, risk management, internal audit, governance, or similar control-focused environment required.
• Strong written and verbal communication skills.
• Ability to coordinate with business and IT teams to gather information and meet deadlines.
• Knowledge of SOX, SOC, COSO, NIST, ISO 27001 preferred.

Responsibilities

• Coordinate IT audit and compliance activities (SOX, SOC 1/2, OIR, and others).
• Collect, validate, and maintain audit documentation and evidence.
• Monitor control owners' progress and remediation items.
• Provide regular status updates to management via dashboards and reports.
• Maintain audit calendars, action-item logs, and evidence repositories.
• Serve as liaison among auditors, business owners, IT teams, vendors, and regulators.
• Schedule meetings and coordinate communications between auditors and internal teams.
• Assist with customer/regulatory audit requests and IT controls documentation.
• Support risk assessments, risk registers, and remediation tracking.

Skills

Organizational skills

Communication skills

Multitasking

IT infrastructure basics

Excel / Office tools

Documentation management

SOX / SOC audit knowledge

COSO / NIST / ISO 27001 knowledge

JIRA familiarity

Education

Bachelor's degree in Business, Information Systems, Accounting, Finance, or related field

Tools

JIRA

Job description

The IT Audit & Compliance Associate is responsible for supporting internal and external audit activities through the collection, organization, and tracking of audit documentation and compliance evidence. This position coordinates audit requests, maintains audit records and status trackers, monitors outstanding items, and follows up with business and technology teams to ensure timely completion of audit deliverables. The role serves as a liaison between auditors and internal stakeholders, vendors, and regulators, helping to facilitate audit readiness and support ongoing compliance efforts. The position also supports IT control documentation, risk assessments, vendor due diligence, remediation tracking, and management reporting. This position requires strong organizational skills, attention to detail, effective communication, and the ability to manage multiple priorities while driving accountability across teams.

ESSENTIAL DUTIES & RESPONSIBILITIES

• Coordinate IT audit and compliance activities, including SOX, SOC 1, SOC 2, OIR, and other regulatory examinations.
• Request, collect, organize, validate, and maintain audit documentation and supporting evidence from business and IT teams.
• Monitor control owners' progress on completing audit-related tasks and remediation items.
• Escalate overdue items and provide regular status updates to management, including audit dashboards and management reports.
• Maintain audit calendars, status reports, action-item logs, and evidence repositories.
• Serve as the primary point of contact for collecting information requested by auditors and as a liaison among business owners, IT teams, auditors, vendors, and regulators.
• Schedule meetings and coordinate communications between auditors and internal teams.
• Assist with customer and regulatory audit requests by gathering required documentation.
• Assist with documenting and maintaining IT controls, policies, standards, and procedures.
• Support risk assessments and maintain risk registers and remediation tracking.

REQUIRED SKILLS & EXPERIENCE

• Strong organizational and follow-up skills, with demonstrated analytical and problem-solving ability.
• Ability to manage multiple requests and deadlines simultaneously.
• Excellent written and verbal communication skills.
• Comfortable working with technical and non-technical teams.
• Demonstrate a foundational understanding of IT infrastructure, databases, web technology and security frameworks.
• Proficiency with Microsoft Excel, Word, PowerPoint, Teams, and collaboration tools.
• Experience maintaining trackers, spreadsheets, and documentation repositories.
• Exposure to IT audits, compliance, SOC, SOX, or risk management processes is preferred but not required. Knowledge of COSO, NIST, ISO 27001, and vendor risk management is also preferred.
• Proficiency using JIRA or similar governance, risk, compliance, or workflow tools is a plus.

EDUCATION & TRAINING

• Bachelor's degree in Business, Information Systems, Accounting, Finance, or a related field preferred.
• 1-2 years of relevant experience in an IT audit, compliance, risk management, internal audit, governance, or similar control-focused environment required.

To foster Exzeo’s commitment to creating a collaborative work environment, remote workers will be required to report to a central office location for one week every quarter for collaboration, team building, and educational exercises.

Exzeo offers 100% employer-paid health, dental, vision, life, and disability insurance for employees, a flexible paid time off plan, a 401(k) match, and bonus potential.