Senior Analyst IT Compliance

Optimum; Bethpage (NY); On-site; USD 93,000 - 152,000; Full time

Job summary

Optimum in Bethpage, NY is seeking a Senior IT Compliance Analyst to support SOX, PCI DSS, NIST CSF, ITGCs, and emerging AI-related controls. This hands-on role tests, analyzes, and remediates control issues across enterprise tech, cloud platforms, and applications, leveraging data analytics and automation.

You will collaborate with Cybersecurity, IT teams, and Internal Audit to strengthen audit readiness and develop automated dashboards and monitoring solutions using GRC tools and scripting.

Qualifications

• 5+ years of IT compliance or audit experience.
• Knowledge of SOX, PCI DSS, NIST CSF and ITGCs.
• Experience testing technical controls across AD, servers, apps.
• Proficient in data analytics and scripting for evidence.

Responsibilities

• Perform technical compliance and control testing across enterprise technologies, applications, systems, infrastructure, and cloud environments, including access, security, and operational controls.
• Test key technology controls including logical access, privileged access, user access reviews, change management, authentication, password management, and other essential controls.
• Extract, reconcile, validate, and analyze technical evidence, system-generated data, and large data populations to identify exceptions, trends, anomalies, and potential control issues.
• Maintain complete and accurate documentation of testing procedures, evidence reviewed, conclusions reached and identified exceptions.
• Collaborate with IT technical groups, Cybersecurity, business groups, control owners, Internal Audit, and other stakeholders to gather and evaluate evidence, understand technical processes, and assess control effectiveness.
• Identify control exceptions and work collaboratively with control owners and technical teams to investigate issues, determine root causes, and support remediation efforts through closure.

Skills

IT Compliance

IT Audit

Cybersecurity

Data analytics

Communication

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related technical discipline

Tools

PowerShell

Python

SQL

Power BI

Power Automate

Alteryx

Job description

Are you looking to Optimize your life? Start your exciting path to a rewarding career today!

We are Optimum, a leader in the fast-paced world of connectivity, and we're seeking driven and enthusiastic professionals to join our team, empower lives, fuel businesses, and drive innovation. Connectivity is no longer a luxury, but a necessity. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected. Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities.

If you are resourceful, collaborative, and passionate about delivering consistent excellence, Optimum is for you!

Job Summary

The Senior IT Compliance Analyst will support the Company's IT Compliance programs across a broad range of regulatory, industry, and internal control requirements, including the Sarbanes-Oxley Act (SOX), Payment Card Industry Data Security Standard (PCI DSS), NIST Cybersecurity Framework (NIST CSF), IT General Controls (ITGCs), and emerging compliance requirements related to artificial intelligence (AI) and other evolving technologies. This hands-on technical role will perform control testing and monitoring, analyze data, identify control exceptions, and support remediation efforts across enterprise technologies, cloud platforms, applications, and systems. The role will leverage data analytics, automation, and technology-driven solutions to strengthen control monitoring, improve compliance processes, enhance audit readiness, and reduce manual effort. The ideal candidate will possess strong technical, analytical, and problem-solving skills, with the ability to work independently and collaborate effectively with technical and business stakeholders across the organization.

Responsibilities

• Perform technical compliance and control testing across enterprise technologies, applications, systems, infrastructure, and cloud environments, including access, security, and operational controls
• Test key technology controls including logical access, privileged access, user access reviews, change management, authentication, password management, and other essential controls
• Extract, reconcile, validate, and analyze technical evidence, system-generated data, and large data populations to identify exceptions, trends, anomalies, and potential control issues
• Perform completeness and accuracy validation of system-generated reports, data extracts, and compliance evidence used during testing activities
• Maintain complete and accurate documentation of testing procedures, evidence reviewed, conclusions reached and identified exceptions
• Collaborate with IT technical groups, Cybersecurity, business groups, control owners, Internal Audit, and other stakeholders to gather and evaluate evidence, understand technical processes, and assess control effectiveness
• Identify control exceptions and work collaboratively with control owners and technical teams to investigate issues, determine root causes, and support remediation efforts through closure
• Support internal and external audits by performing technical analysis, responding to evidence requests, and assisting with audit inquiries
• Lead assigned compliance testing, monitoring, and process improvement initiatives from planning through implementation and reporting
• Develop and maintain compliance analytics, dashboards, automated workflows, and continuous control monitoring solutions to proactively identify control deficiencies, exceptions, and emerging risks
• Utilize GRC platforms, workflow tools, data analytics solutions, and other technologies to support testing, documentation, issue management, remediation tracking, monitoring, and reporting
• Support IT Compliance activities related to artificial intelligence (AI), machine learning (ML), and generative AI technologies, including evaluating applicable controls, data management practices, and third-party AI solutions against organizational requirements and relevant frameworks such as NIST AI RMF and ISO/IEC 42001
• Identify opportunities to improve compliance processes and implement scalable solutions that strengthen control monitoring, improve audit readiness, and reduce manual effort

Qualifications

• Five or more years of experience in IT Compliance, IT Audit, Technology Risk, Cybersecurity, or a related discipline, including experience performing technical control testing or compliance activities
• Strong background in IT Compliance, information technology infrastructure, and technical control environments
• Working knowledge of SOX, ITGCs, PCI DSS, NIST CSF, and other applicable regulatory and information security requirements
• Working knowledge of artificial intelligence (AI), machine learning (ML), and generative AI technologies, including an understanding of related security, risk, governance, and compliance considerations
• Experience testing technical controls involving Active Directory, servers, operating systems, applications, databases, identity and access management, privileged access, or similar technologies
• Knowledge of identity and access management, privileged access management, access certification, and related security controls
• Strong data analytics skills, including experience analyzing, reconciling, and validating large data populations
• Hands-on experience using one or more scripting, automation, querying, reporting, or data visualization technologies such as PowerShell, Python, SQL, Power BI, Power Automate, Alteryx, or similar tools
• Experience using GRC platforms or other compliance technologies to support compliance, audit, issue management, control testing, remediation, monitoring, and reporting processes
• Strong analytical, critical-thinking, and problem-solving skills with the ability to interpret technical information and identify control issues
• Clear written and verbal communication skills, with strong attention to detail
• Solid time management, organization, and project management skills, and the ability to work independently

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related technical discipline; equivalent experience may be considered
• CISA, CISSP, CRISC, Security+, CIA, or other relevant professional or technical certification preferred
• Experience supporting SOX, PCI DSS, and NIST CSF compliance programs in a large enterprise environment
• Proven ability to build automated compliance workflows, evidence collection processes, data validation solutions, control monitoring capabilities, or compliance analytics dashboards
• Familiarity with cloud technologies and cloud security and control environments, including Microsoft Azure, Microsoft 365, AWS, or similar platforms
• Experience supporting IT Compliance, audit, or control assessment activities involving artificial intelligence (AI), machine learning (ML), generative AI, or other emerging technologies
• Understanding AI governance and risk management frameworks, including the NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, or similar standards
• Experience utilizing AI capabilities as part of an everyday workflow to improve productivity, analysis, automation, or problem-solving

At Optimum, every action and interaction we take part in, is driven by our three Guiding Principles: Do What's Right, Drive One Optimum, and Make It Happen. These aren’t just words, they help us build trust, create real community, and embrace new ways of thinking. Our employees are empowered to do the right thing for our customers and co-workers and to recognize and reward these behaviors when we see them. It’s all part of the bigger picture of Be The Difference where each employee knows they have the power to enact real change, share new ideas, and understand that learning never stop.

If you have the drive to succeed and are ready to embark on a thrilling career, seize this opportunity today, and join our winning team. Together, we'll shape the future of connectivity.

All job descriptions and required skills, qualifications and responsibilities for a particular position are subject to modification by the Company from time to time, in the Company’s discretion based on business necessity.

We are an Equal Opportunity Employer committed to recruiting, hiring and promoting qualified people of all backgrounds regardless of gender, race, color, creed, national origin, religion, age, marital status, pregnancy, physical or mental disability, sexual orientation, gender identity, military or veteran status, or any other basis protected by federal, state, or local law.

The Company collects personal information about its applicants for employment that may include personal identifiers, professional or employment related information, photos, education information and/or protected classifications under federal and state law. This information is collected for employment purposes, including identification, work authorization, FCRA-compliant background screening, human resource administration and compliance with federal, state and local law.

Applicants for employment with The Company will never be asked to provide money (even if reimbursable) as part of the job application or hiring process. Please review our Fraud FAQ for further details.

Pay is competitive and based on a number of job-related factors, including skills and experience. The starting pay rate/range at time of hire for this position in the posted location is $92,534.00 - $152,021.00 / year. The rate/range provided herein is the anticipated pay at the time of hire and does not reflect future job opportunity.

We appreciate your interest in this opportunity. Applicants must be authorized to work for ANY employer in the U.S. Please note that at this time, we do not provide visa sponsorship for employment.