IT Compliance & Assurance Analyst: SOX & Controls

CACI International Inc; Oklahoma City (OK); On-site; USD 67,800 - 142,200; Full time

Job summary

CACI International Inc seeks an experienced IT Assurance and Compliance Analyst to shape and maintain its IT control environment by assessing internal controls, coordinating IT SOX audits, and validating compliance with key regulatory frameworks. You will partner with IT and business owners to drive remediation and strengthen SOX control performance.

Responsibilities include supporting SOX and ISO 27001 audits, developing compliant documentation, and collaborating with auditors and leadership to

Qualifications

• Bachelor’s degree in MIS, Information Assurance, Cybersecurity, Auditing, or a related discipline.
• 2+ years of experience in IT auditing, ITGC testing, IT consulting, or IT compliance.
• Experience leading meetings and communicating effectively with technical and non-technical stakeholders.
• Working knowledge of SOX, COSO, COBIT, ISO 27001, DFARS 252.204-7012, and NIST SP 800-171.
• Experience evaluating IT processes, controls, policies, and governance frameworks.
• Ability to identify control gaps, assess risk, recommend solutions, and clearly communicate findings.
• Exceptional written and verbal communication skills, with the ability to simplify complex issues.
• Strong interpersonal skills and the ability to collaborate effectively with external auditors and internal teams.
• Strong organizational skills with the ability to handle multiple workstreams and deadlines independently.
• Demonstrated ability to operate with minimal supervision in a complex IT environment.

Responsibilities

• Coordinate IT SOX compliance activities, including walkthroughs, evidence collection, ITGC testing support, remediation tracking, and audit readiness.
• Support internal and external IT SOX audits, ISO 27001 assessments, and third‑party compliance reviews for IT services.
• Monitor remediation plans across corporate and program enclaves ensuring timely resolution of SOX findings and broader compliance issues.
• Develop, maintain, and improve compliance documentation and guidance, including system security plans, policies, procedures, and control libraries.
• Communicate and collaborate with IT teams to strengthen SOX control performance, improve security compliance, and support a consistent, well‑governed control environment.
• Build and maintain strong working relationships across IT, cybersecurity, infrastructure, and business stakeholders at all organizational levels.
• Assist with IT compliance and assurance special projects as required, including process maturity initiatives and control automation efforts.
• Research and stay current on evolving IT regulatory requirements—particularly SOX and SEC requirements—while gaining exposure to cybersecurity frameworks (NIST 800‑X), DFARS, and CMMC regulations.
• Maintain a continuous learning mindset as technologies, regulations, and compliance frameworks evolve.

Skills

IT auditing

Regulatory compliance

SOX

Effective communication

Stakeholder management

Education

Bachelor’s degree in MIS, Information Assurance, Cybersecurity, Auditing, or a related discipline

Tools

ServiceNow IRM

Job description

CACI International Inc seeks an experienced IT Assurance and Compliance Analyst to shape and maintain its IT control environment by assessing internal controls, coordinating IT SOX audits, and validating compliance with key regulatory frameworks. You will partner with IT and business owners to drive remediation and strengthen SOX control performance.

Responsibilities include supporting SOX and ISO 27001 audits, developing compliant documentation, and collaborating with auditors and leadership to