We are seeking an experienced IT Compliance Auditor to analyze internal processes and third-party vendor documentation, identify gaps against IT standards, and support compliance initiatives.
The ideal candidate will have strong analytical, communication, and project management skills, with a solid understanding of IT risk frameworks and governance practices.
Key Responsibilities
- Analyze internal processes and third-party vendor documentation to identify gaps against IT standards and requirements.
- Collaborate with internal and external stakeholders to assess IT risks, recommend mitigating controls, and evaluate security and operational impacts.
- Document IT risks and prepare reports for senior leadership.
- Support PCI-DSS compliance activities to maintain organizational compliance.
- Perform additional Governance, Risk, and Compliance (GRC) duties as assigned by the IT Risk Management team.
Required Qualifications- 5 to 7 years of experience in IT compliance, risk management, GRC, or internal audit with a focus on technology assessments.
- Bachelor’s degree or higher in Information Technology, Computer Science, or a related field.
- Strong communication skills with the ability to convey complex ideas to various stakeholders.
- Excellent negotiation and critical analysis skills.
- Strong project management capabilities.
- Ability to challenge and escalate responses when necessary, based on process understanding.
- Solid understanding of PCI and/or NIST 800-53 frameworks.
Preferred Qualifications- Experience in the retail industry or within Fortune 500 companies.