IT Compliance, Automation Analyst

Jobtailor; Denver (CO); On-site; USD 110,000 - 170,000; Full time

Job summary

Ibotta is seeking an experienced IT Regulatory Compliance professional to oversee and advance IT controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001. You will guide business teams on compliance, lead control testing, and coordinate with internal and external auditors.

The role emphasizes risk assessments, automation through scripting and AI tools, and continuous improvement of evidence collection and control monitoring processes to sustain audit quality.

Qualifications

• Bachelor's degree in IT, Information Systems, or related field, or equivalent practical experience required.
• 4+ years of IT regulatory compliance experience with hands-on SOX ITGC and ITAC work.

Responsibilities

• Develop, maintain, and improve IT controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001.
• Provide compliance guidance and best practices to IT and business teams.
• Lead IT control testing and audit coordination with internal and external auditors, and third-party assessors.
• Conduct risk assessments, identify control gaps and compliance issues, and drive remediation with process and control owners.
• Redesign manual compliance processes such as access reviews, evidence collection, and control monitoring using scripting, workflow tools, and AI-assisted technologies.
• Build and maintain a compliance automation roadmap, measure efficiency gains, and report progress to management.
• Improve audit evidence collection and PBC processes.
• Develop understanding of IT infrastructure to identify risks and opportunities for improvement.
• Monitor regulatory requirements and emerging automation/AI technologies.
• Provide guidance and training to stakeholders.
• Uphold Ibotta's Core Values
• Securely handle data, identify phishing attempts, and report security incidents

Skills

SOX ITGC

ITAC

SOC 1 Knowledge

SOC 2 Knowledge

ISO 27001 Familiarity

Technical Auditing

Automation

Scripting

Workflow Tools

Cloud Environments

Data Security

Phishing Identification

Education

Bachelor's degree in IT/Information Systems

Tools

GRC Platforms

AI-Based Tools

Workflow/RPA Tools

Audit Evidence Collection Tools

Compliance Automation Tools

Job description

• Develop, maintain, and continuously improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001
• Provide compliance guidance and best practices to IT and business teams
• Lead IT control testing and audit coordination with internal audit, external auditors, and third-party assessors
• Conduct risk assessments, identify control gaps and compliance issues, and drive remediation with process and control owners
• Redesign manual compliance processes such as access reviews, evidence collection, and control monitoring using scripting, workflow tools, and AI-assisted technologies
• Build and maintain a compliance automation roadmap, measure efficiency gains, and report progress to management
• Improve audit evidence collection and PBC processes
• Develop understanding of Ibotta's IT infrastructure, applications, and systems to identify risks and improvement opportunities
• Monitor regulatory requirements and emerging automation/AI technologies
• Provide guidance and training to stakeholders
• Uphold Ibotta's Core Values
• Securely handle data, identify and report phishing attempts, and report security incidents

Requirements

• 4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC
• Bachelor's degree in IT, Information Systems, or a related field, or equivalent practical experience required
• Working knowledge of SOC 1, SOC 2, and ISO 27001
• Proficient in technical auditing
• Experience translating controls and compliance requirements for technical stakeholders
• Experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies
• Sound judgment around applying AI to compliance workflows while maintaining audit-quality standards
• Experience documenting internal control processes through narratives, flowcharts, or similar documentation
• Analytical, problem-solving, communication, and collaboration skills
• Ability to work independently and manage competing priorities
• Knowledge of IT systems and cloud environments such as AWS
• Applicants must be currently authorized to work in the United States on a full-time basis
• CISA or similar professional certification preferred; SOC 2 or ISO 27001 certifications/coursework are a plus

Core Competencies

Demonstrates expertise in IT regulatory compliance, particularly with SOX ITGC, ITAC, SOC 1, SOC 2, and ISO 27001. Proficient in technical auditing, risk assessment, and automation of compliance processes using advanced technologies.

Highest-signal resume keywords

• SOX ITGC Compliance
• SOC 1 Knowledge
• SOC 2 Knowledge
• ISO 27001 Familiarity
• Technical Auditing

ATS Optimization Keywords

Hard Skills

• IT Regulatory Compliance
• Risk Assessment
• Control Testing
• Process Automation
• Control Documentation
• Data Security
• Phishing Identification
• Cloud Environments
• Scripting
• Workflow Tools

Soft Skills

• Analytical Skills
• Problem-Solving
• Communication
• Collaboration
• Judgment

Certifications & Qualifications

• CISA
• SOC 2 Certification
• ISO 27001 Certification

Industry Keywords

• ITGC
• ITAC
• Compliance Guidance
• Audit Coordination
• Control Gaps
• Regulatory Requirements
• Emerging Technologies
• Access Reviews
• Evidence Collection
• Control Monitoring

Tools & Technologies

• GRC Platforms
• AI-Based Tools
• Workflow/RPA Tools
• Audit Evidence Collection Tools
• Compliance Automation Tools