IT Compliance Analyst

01400 Rocky Mountain Support Services; Jacksonville (FL); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Bonus eligibility

Medical/Dental/Vision Insurance

401(k) plan with match

Employee stock purchase plan

Job summary

FNF is seeking an IT Compliance Analyst to join the IT Compliance team in Jacksonville, hybrid work with light travel. You will develop, evaluate, and monitor IT controls, participate in internal controls/SOC2 compliance, information security, and audit areas supporting operational, financial, and tech objectives.

You will work with IT leadership to plan, coordinate, and report on control environments, define remediation actions, and communicate findings.

Qualifications

• Bachelor’s degree in IT, MIS, CS, Finance & Tech, or related field.
• 2–4 years in IT Compliance, IT Audit, or IT Risk roles.
• Understanding of IT policies, risks, processes, and controls.
• Ability to identify risks and controls; security optimization for applications.
• Experience with security design workshops with IT stakeholders.
• Experience with frameworks: NY DFS, NIST, CIS, NAIC, or similar.
• Experience across IT ecosystems (App Dev, Infrastructure, Cloud).
• Familiar with SOX, SOC2 or Trust Services Principles.
• Proficiency in Excel, Word, and PowerPoint.
• Experience scheduling and presenting status reports.

Responsibilities

• Coordinate with internal and external auditors to support the full audit lifecycle.
• Document IT processes and design of controls.
• Develop testing approaches to evaluate control effectiveness.
• Act as liaison between IT management and auditors to review evidence and close findings.
• Manage IT remediation tracking and post-migration cloud evaluations.
• Provide regular reports to IT leadership with observations and insights.
• Support IT Compliance information systems, including SharePoint on-prem and cloud.

Skills

IT Compliance

IT Audit

IT Risk

Security controls

Stakeholder mgmt

Education

Bachelor’s degree

Tools

SharePoint

ServiceNow

CMDB

GRC

Job description

FNF® is the leading provider of title insurance and settlement services to the real estate and mortgage industries. FNF®'s various mortgage and real estate services companies provide services that complement our title insurance business. From a full-service qualified intermediary, home warranties, UCC insurance, relocation services, and notary services, we provide essential services to fulfill the needs of a changing real estate industry. FNF® believes the power of technology can elevate the real estate transaction. From investments in title and escrow software to industry-leading real estate partner solutions, we take our commitment to provide real estate professionals and consumers with a truly reimagined, transparent, connected, and trusted real estate experience to heart.

POSITION OVERVIEW

We are seeking an IT Compliance Analyst to join the IT Compliance team to work closely with IT management in the development, evaluation, and monitoring of the IT control environment. The IT Compliance Analyst serves as a key member of the IT Compliance team with growing responsibilities; this person may be called upon to participate in any aspect of IT Compliance. This includes planning, coordination, development, execution, maintenance and reporting of the overall IT Control frameworks; Internal Controls/SOC2 compliance; information security; and other audit areas that may serve a combination of operational, financial and technological objectives. The person in this role must possess a strong working knowledge of IT risk and audit concepts, practices, and procedures while relying on experience in enterprise IT systems, project management, data analytics, and program level communications and reporting.

LOCATION

This position will be hybrid based in Jacksonville, Florida with less than 20% travel.

DUTIES & RESPONSIBILITIES

Support of the organization to achieve their IT compliance responsibilities. Coordinate and liaise with internal and external auditors, as an IT representative to support the full audit lifecycle. Document new and existing IT processes and design of controls. Develop and execute testing approaches to evaluate the operating effectiveness of controls and maintain ongoing compliance through continuous monitoring. Act as a single point-of-contact between IT managers and auditors to review control evidence and close audit findings; including reviewing management control testing and documentation. Operate as IT Compliance administrator for the IT remediation work tracking system; the system used to track the status of remediation deliverables committed to audit teams. Work with IT managers to address audit findings by developing and implementing practical solutions towards remediation of the findings, including defining success criteria. Execute post-migration evaluations for application migrations to the cloud. Communicate effectively with IT leadership, present key observations and value-added insights through regular reporting. Administrative support of the IT Compliance information, reporting, and workflow systems. Namely SharePoint on-prem and cloud systems. Identify and present new opportunities to streamline or innovate IT Compliance processes, reporting, or systems.

MINIMUM REQUIREMENTS

• Bachelor’s degree (Preferred Fields of Study; Information Technology, Management Information Systems, Computer and Information Science, Finance & Technology, Business or related field)
• 2-4 years in an IT Compliance, IT Audit, or IT Risk role
• Understanding of IT policies, risks, processes, and controls
• Ability to identify key risks and controls, with a thorough understanding of security and control optimization for application security
• Experience in conducting security design workshops with IT stakeholders
• Demonstrates ability to manage relationships with IT management at varying levels
• Experience with assessing control frameworks NY DFS, NIST, CIS, NAIC, TSC, or similar
• Experience across IT ecosystems (Application Development, Infrastructure, Cloud)
• Familiar with SOX, SOC2 or Trust Services Principles.
• Proficiency in Microsoft Excel, Word, and PowerPoint
• Experience scheduling and preparing presentations and status reports

PREFERRED EXPERIENCE

• Experience with cloud platform technology
• Experience with ServiceNow and CMBD platform
• Experience with GRC solutions
• Familiarity with SharePoint development or administration
• Familiarity with assessing cloud architecture
• Microsoft Directory Services

COMPENSATION & BENEFITS

FNF, its affiliates, and subsidiaries carefully considers multiple factors to determine compensation, including a candidate's education, training, specialty, experience, and work location. The base salary (exempt) or hourly rate (non-exempt) is just one component of the total rewards package offered to our employees, including potential bonus or commission eligibility, insurance (medical/dental/vision/life/disability), matching 401(k) plan and matching employee stock purchase plan.

EQUAL OPPORTUNITY POLICY

FNF, its affiliates and subsidiaries, is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, protected veteran status, national origin, sexual orientation, gender identity or expression (including transgender status), genetic information or any other characteristic protected by applicable law.