IT Compliance & Automation Analyst

Ibotta; Denver (CO); Hybrid; USD 110,000 - 125,000; Full time

Benefits offered by this job

Paid parking

Snacks

Occasional meals

Job summary

Ibotta is seeking an IT Compliance & Automation Analyst in Denver to strengthen and modernize the IT compliance program across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001 while leading automation initiatives. This hybrid role requires 3 days in-office in Denver and US residency.

Ideal candidates have 4+ years in IT regulatory compliance and a passion for AI-driven process improvement. Relocation bonus offered if not based in Denver; base compensation ranges from $110,000 to $125,000 with equity

Qualifications

• 4+ years of IT regulatory compliance experience, including at least 2 years on SOX ITGC/ITAC
• Bachelor's degree in IT or related field, or equivalent practical experience
• Working knowledge of SOC 1, SOC 2, and ISO 27001, including how these frameworks overlap with and differ from SOX requirements
• Proficient in technical auditing and communicating controls to technical stakeholders
• Experience automating processes with scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies
• Curiosity and sound judgment applying AI to compliance workflows while maintaining audit standards
• Experience documenting internal control processes via narratives or flowcharts

Responsibilities

• Partner with IT and business teams to develop and maintain controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001
• Lead IT control testing and audit coordination with internal and external auditors
• Conduct risk assessments, identify control gaps, and drive remediation with owners
• Identify manual, time-consuming compliance processes and redesign with scripting and AI tools
• Build and maintain a roadmap of automation initiatives and report progress to management
• Improve audit evidence collection and PBC processes to reduce admin burden
• Develop understanding of IT infrastructure to identify risks and improvement opportunities
• Stay current on regulatory requirements and emerging automation technologies
• Uphold core values and promote ethical, compliant practices

Skills

IT compliance experience

Automation / AI in compliance

Technical auditing

AWS / cloud knowledge

Analytical skills

Communication & collaboration

Education

Bachelor's degree in IT or Information Systems

Tools

GRC platforms

Scripting

Workflow/RPA tools

AI-based tools

Job description

Ibotta is seeking an IT Compliance & Automation Analyst to join our innovative team and contribute to our mission to Make Every Purchase Rewarding. You will help strengthen and modernize Ibotta's IT compliance program and contribute to our mission to Make Every Purchase Rewarding. This role will support compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, while identifying opportunities to automate manual processes and build more efficient, scalable compliance workflows. The ideal candidate brings demonstrated IT compliance experience in a public company environment along with a passion for using automation and emerging AI technologies to improve how compliance work gets done.

This position is located in Denver, Colorado as a hybrid position requiring 3 days in office (Tuesday, Wednesday, and Thursday). Candidates must live in the United States.

Not based in Denver? We will offer a relocation bonus to help make your move to the Mile High City a smooth one.

What you will be doing:

• Partner with IT and business teams to develop, maintain, and continuously improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, providing guidance on compliance requirements and best practices

• Lead IT control testing and audit coordination across compliance frameworks, partnering with internal audit, external auditors, and third-party assessors

• Conduct risk assessments, identify control gaps and compliance issues, and partner with process and control owners to drive remediation

• Identify manual, time-intensive compliance processes — including access reviews, evidence collection, and control monitoring — and redesign them using scripting, workflow tools, and AI-assisted technologies

• Build and maintain a roadmap of compliance automation initiatives, measuring efficiency gains and reporting progress to management

• Continuously improve audit evidence collection and PBC processes to reduce administrative burden while maintaining audit quality

• Develop a solid understanding of Ibotta's IT infrastructure, applications, and systems to proactively identify risks and opportunities for improvement

• Stay current on evolving regulatory requirements and emerging automation/AI technologies, and provide guidance and training to relevant stakeholders

• Embrace and uphold Ibotta's Core Values: Integrity, Boldness, Ownership, Teamwork, Transparency, & A good idea can come from anywhere

What we are looking for:

• 4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC

• Bachelor's degree in IT, Information Systems, or a related field, or equivalent practical experience required

• Working knowledge of SOC 1, SOC 2, and ISO 27001, including how these frameworks overlap with and differ from SOX requirements

• Proficient in technical auditing and experience translating controls and compliance requirements for technical stakeholders

• Demonstrated experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies

• Curiosity and sound judgment around applying AI to compliance workflows while maintaining appropriate standards for audit-quality work

• Experience documenting internal control processes through narratives, flowcharts, or similar documentation

• Effective analytical, problem-solving, communication, and collaboration skills, with the ability to work independently and manage competing priorities

• Knowledge of IT systems and cloud environments such as AWS

• CISA or similar professional certification preferred; SOC 2 or ISO 27001 certifications/coursework are a plus

About Ibotta ("I bought a...")

Ibotta (NYSE: IBTA) is a leading performance marketing platform allowing brands to deliver digital promotions to over 200 million consumers through a network of publishers called the Ibotta Performance Network (IPN). The IPN allows marketers to influence what people buy, and where and how often they shop – all while paying only when their campaigns directly result in a sale. American shoppers have earned over $2.6 billion through the IPN since 2012. The largest tech IPO in history to come out of Colorado, Ibotta is headquartered in Denver, and is continually listed as a top place to work by The Denver Post and Inc. Magazine.

To learn more about what our Tech teams are doing day to day, visit Building Ibotta on Medium.com

Additional Details:

• This position is located in Denver, CO and includes competitive pay, flexible time off, benefits package (including medical, dental, vision), Employee Stock Purchase Program, and 401k match. Denver office perks include paid parking, snacks, and occasional meals.

• Base compensation range: $110,000 - $125,000. Equity is included in overall compensation package. This compensation range is specific to the United States labor market and may be adjusted based on actual experience.

• Ibotta is an Equal Opportunity Employer. Ibotta’s employment decisions are made without regard of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected status.

• Applicants must be currently authorized to work in the United States on a full-time basis.

• Applicants are accepted until the position is filled.

• For the security of our employees and the business, all employees are responsible for the secure handling of data in accordance with our security policies, identifying and reporting phishing attempts, as well as reporting security incidents to the proper channels.