Risk & Compliance Analyst

Epicor Software Corporation; Austin (TX); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Epicor Software Corporation in Austin, TX is seeking a Risk & Compliance Analyst to support information security, risk, and compliance programs by monitoring, evaluating, and maintaining IT security frameworks and controls.

You will independently manage assigned projects from planning through completion, collaborate with stakeholders, and leverage automation, scripting, and AI-enabled technologies to improve efficiency and strengthen security posture across cloud, hosting, and on-prem

Qualifications

• Execute and monitor IT security compliance activities and identify root causes and control gaps.
• Coordinate and support internal and external IT security audits and address evidence gaps.
• Review technical audit evidence from cloud, SaaS, hosting, infrastructure, identity, and networks.
• Translate standards and regulatory requirements into actionable security controls and tests.
• Independently manage assigned compliance projects planning through completion.
• Identify opportunities to automate repetitive compliance tasks and develop automation solutions.
• Build relationships with stakeholders, control owners, and auditors.
• Manage multiple audits and communicate risks, issues, dependencies, and status.
• Assist sales with security questionnaires from customers.

Responsibilities

• Lead compliance activities and report findings to leadership.
• Support audits by gathering and validating audit evidence.
• Review cloud and hosting environment evidence for control effectiveness.
• Drive automation and AI-enabled solutions to improve efficiency.

Skills

IT security

IT risk

Compliance

Audit principles

Cloud environments

Scripting

AI technologies

Project management

Analytical thinking

Learning agility

Education

Bachelor's degree or equivalent

Tools

APIs

Automation scripting

Data analysis tools

AI-enabled automation

Job description

The Risk & Compliance Analyst supports the organization's information security, risk, and compliance programs by monitoring, evaluating, and maintaining ITsecurity frameworks, policies, standards, controls, and best practices. This role performs compliance and audit activities, evaluates technical evidence from cloud and hosting environments, and works with stakeholders to identify and remediate control gaps.

The Risk & Compliance Analyst independently manages assigned projects and compliance activities from initiation through completion and contributes to continuous improvement through the use of automation, scripting, data analysis, and AI-enabled technologies. The role requires strong technical curiosity, ownership, analytical thinking, and the ability to rapidly learn new technologies, processes, tools, and applications.

What you'll be doing

• Execute and monitor compliance activities related to IT security frameworks, policies, standards, controls, and industry best practices; analyze findings, identify root causes and control gaps; and communicate results and recommendations to stakeholders and leadership.
• Coordinate and support internal and external IT security audits, including gathering, reviewing, validating, organizing, and presenting audit evidence and working with control owners to address evidence gaps and remediation activities.
• Review and evaluate technical audit evidence from cloud, SaaS, hosting, infrastructure, identity, network, security, and other technology environments to determine whether controls are appropriately designed, implemented, and operating effectively.
• Translate industry standards, regulatory requirements, contractual obligations, and audit criteria into actionable security controls, policies, procedures, testing requirements, and compliance activities.
• Independently manage assigned compliance projects and workstreams from planning through completion, including defining activities, coordinating stakeholders, tracking milestones and dependencies, resolving issues, and delivering required outcomes with limited supervision.
• Identify opportunities to automate repetitive compliance, audit, evidence collection, testing, reporting, and data analysis activities; develop or support scripts, integrations, workflows, and AI-enabled solutions to improve efficiency and scalability.
• Build and maintain productive relationships with internal stakeholders, control owners, technology teams, auditors, and other compliance partners while asking probing questions and challenging assumptions when additional information or evidence is required.
• Manage multiple concurrent audits, compliance activities, projects, and deadlines; maintain accurate documentation and proactively communicate risks, issues, dependencies, and status.
• Assist the sales team by responding to security questionnaires and questions submitted by customers and prospects.

What you'll likely bring

• Strong working knowledge of information security, IT risk, compliance, audit principles, and control frameworks, with sufficient technical understanding of cloud and hosted environments to analyze system configurations, access controls, logs, infrastructure evidence, security controls, and other technical audit artifacts.
• Fluency with modern AI technologies, including generative AI, large language models, AI agents, and AI-enabled automation, with the ability to understand their capabilities, limitations, security and compliance considerations, and appropriate application to compliance processes.
• Working knowledge of scripting and development concepts, with an interest and ability to develop automation that reduces manual compliance activities.
• Strong project management, analytical, problem-solving, and organizational skills, including the ability to independently take ownership of work, manage multiple competing priorities and projects, meet deadlines, and drive activities through completion.
• Demonstrated curiosity and learning agility, including the ability to ask effective questions, investigate unfamiliar technical concepts, challenge incomplete information, and rapidly learn new technologies, processes, tools, applications, and compliance requirements.

What can set you apart

• 3+ years of applicable experience in IT compliance, governance, risk and compliance (GRC), IT audit, information security, technology risk, or a related field preferred.
• Bachelor's degree or equivalent combination of education and relevant experience.
• Experience reviewing or supporting audits of cloud, hosted, SaaS, or other technology environments preferred.
• Experience with scripting, automation, APIs, data analysis, AI technologies, or development concepts preferred.
• Proficiency with data analysis tools and experience working with compliance, audit, risk management, data analysis, or workflow tools preferred.

#LI-CM1

#HYBRID

About Epicor

At Epicor, we’re truly a team. Join 5,000 talented professionals in creating a world of better business through data, AI, and cognitive ERP. We help businesses stay future-ready by connecting people, processes, and technology. From software engineers who command the latest AI technology to business development reps who help us seize new opportunities, the work we do matters. Together, Epicor employees are creating a more resilient global supply chain.

Whatever your career journey, we’ll help you find the right path. Through our training courses, mentorship, and continuous support, you’ll get everything you need to thrive. At Epicor, your success is our success. And that success really matters, because we’re the essential partners for the world’s most essential businesses—the hardworking companies who make, move, and sell the things the world needs.

Health and Wellness: Comprehensive health and wellness benefits designed to support your overall well-being.

Internal Mobility: Opportunities for mentorship, continuing education, and focused career goal setting, with 25% of positions filled internally.

Career Development: Free LinkedIn Learning licenses for everyone, along with our Mentoring Program to boost your personal development.

Education Support: Geographically specific programs to balance the cost of education with the benefits of continued learning and personal development.

Inclusive Workplace: Collaborate with a diverse team in an inclusive, global workplace that fosters innovation and celebrates partnership.

Work-Life Balance: Policies built on mutual trust and support, encouraging time off to rest, recharge, and reconnect.

Global Mobility: Comprehensive support for international relocations and permanent residency processes.

Equal Opportunities and Accommodations Statement

Epicor is committed to creating a workplace and global community where inclusion is valued; where you bring the whole and real you—that’s who we’re interested in. If you have interest in this or any role- but your experience doesn’t match every qualification of the job description, that’s okay- consider applying regardless.

Epicor Software Corporation provides industry-specific enterprise resource planning (ERP) solutions designed to help businesses improve efficiency and drive growth across various sectors.

Momentum

Team growth

Momentum

Team growth

4% in 12 mo

80 employees on LinkedIn

May 23 May 26

Footprint

Where they work

Madrid, ES

Apply For This Role

Company Epicor Software Corporation

Location Hybrid - Austin, Texas, United States