Senior Compliance Analyst - Technology Operations

dowjones; New York (NY); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Healthcare Plans

Paid Time Off

Retirement Plans

Insurance Plans

Wellness Resources

Education Benefits

Family Care Benefits

Commuter Transit Program

Discounts

Financial Health Programs

Cybersecurity Protection

Job summary

Dow Jones Technology seeks a Senior Compliance Analyst to modernize IT compliance operations across SOX, ISO 27001, PCI-DSS and SOC 2. You will own end-to-end execution, advancing AI-assisted workflows, automated controls testing, and consolidated evidence across global workstreams.

You will report to the Director, IT SOX Compliance, operating with high autonomy across one or more streams while coordinating with Legal, Risk, Finance and auditors to ensure timely certifications.

Qualifications

• 2 to 4 years of IT compliance, audit, controls testing, or related discipline in tech or enterprise environments.
• Experience supporting an end-to-end IT SOX, ISO 27001, PCI-DSS, or SOC 2 audit cycle.
• Cross-functional coordination with Legal, Risk, Finance, auditors, and offshore testing teams.
• Ability to translate framework language into operator-friendly tasks and to executive-ready summaries.
• Ability to produce a structured plan and shipped outcomes with minimal oversight.
• Hands-on with automation, analytics, and modern productivity tools.
• Understanding how AI and automated workflows can reduce manual compliance effort.
• Undergraduate degree in CS/IS/Finance or related field, or equivalent experience.
• Certifications (CISA, CRISC, CISSP, ISO Lead Auditor) welcomed but not required.

Responsibilities

• Support execution across compliance workstreams including policy rollouts, training programs, and audits across IT SOX, ISO 27001, PCI-DSS, SOC 2.
• Track compliance timelines and tasks; manage evidence workflows and status reporting for global audits.
• Coordinate with Legal, Risk, Finance, auditors, and offshore testing partners for evidence collection.
• Identify straightforward compliance issues; surface findings with context to leadership and track remediation.
• Promote compliance awareness across Technology squads; translate framework requirements into routine tasks.
• Support controls automation initiatives; identify repetitive testing workflows to modernize with AI tools.

Skills

IT compliance

Audit coordination

Automation

AI-assisted workflows

Education

Bachelor's degree in CS/IS/Finance or related field

Job description

Job Description

About the Team:

Our Technology team drives the evolution of our Technology, Engineering, Data, Product and User Experience functions. With a keen focus on delivering cutting-edge solutions, we shape the digital landscape for our customers, readers and users. From revolutionizing visuals to optimizing tools and harnessing the power of data, mobile, video and social platforms, our team is committed to providing a seamless and immersive experience across all touchpoints. Collaborating closely with our newsrooms and strategic partners, we spearhead the development of groundbreaking products and technologies.

About the Role:

As Senior Compliance Analyst, you will help modernize how IT Compliance operates. You will own end-to-end execution across the IT SOX program and adjacent certifications (ISO, PCI, SOC 2), while helping build the next generation of compliance operating practices, moving from manual, email-based evidence collection toward AI-assisted workflows, automated controls testing, and consolidated cross-certification evidence. You will operate with high autonomy across a global, cross-functional program, running the day-to-day of one or more compliance workstreams while contributing directly to controls automation, evidence-request modernization, and the consolidation of certification cycles. You will report to the Director, IT SOX Compliance.

You Will:

• Support execution across compliance workstreams, assisting with policy rollouts, training programs, and audit/certification cycles across IT SOX, ISO 27001, PCI-DSS, and SOC 2
• Track compliance timelines and operational tasks, helping manage deadlines, evidence-request workflows, and status reporting to keep global audits on schedule
• Coordinate with internal and external partners—including Legal, Risk, Finance, operational technology teams, internal/external auditors, and offshore testing partners to facilitate evidence collection
• Identify straightforward compliance issues, surfacing findings with context to leadership and assisting in tracking remediation efforts
• Promote compliance awareness across Technology squads, helping translate framework requirements into routine tasks that engineers and operators can execute
• Support controls automation initiatives, working with leadership to identify repetitive testing workflows that can be modernized through automated and AI-assisted tools

You Have:

• 2 to 4 years’ experience in IT compliance, audit, controls testing, or a related discipline within technology or enterprise environments
• Foundational knowledge and practical experience supporting an audit cycle end-to-end under IT SOX, ISO 27001, PCI-DSS, or SOC 2 frameworks
• Proven cross-functional coordination, comfortable partnering with Legal, Risk, Finance, Internal Audit, external auditors, and offshore testing teams simultaneously
• Able to translate compliance framework language into operator-friendly tasks, and technical findings into executive-ready summaries
• Ability to take a high-level objective and return a structured plan and shipped outcomes without extensive oversight
• Hands-on comfort with automation, analytics, and modern productivity tools
• Working understanding of how AI, automation, and intelligent workflows can reduce manual effort in compliance operations
• Bias toward simplification, standardization, and continuous improvement
• An undergraduate degree in Computer Science, Information Systems, Finance, or a related field of study -OR- equivalent experience
• Audit/compliance certifications (CISA, CRISC, CISSP, ISO Lead Auditor) welcomed, but not required

Our Benefits

• Comprehensive Healthcare Plans
• Paid Time Off
• Retirement Plans
• Comprehensive Insurance Plans
• Lifestyle Programs & Wellness Resources
• Education Benefits
• Family Care Benefits & Caregiving Support
• Commuter Transit Program
• Subscription Discounts
• Employee Referral Program
• Financial Health Programs
• Cybersecurity Protection

Business Area

Dow Jones - Technology

Job Category

Finance

Union Status

Union roleBase Pay Range: $100,000 - $130,000

We're committed to offering competitive and flexible compensation to attract top talent. This pay range reflects our good faith estimate for the role and may vary based on a candidate’s experience, skills, location, and other relevant factors.

For bonus-eligible roles, targets are determined based on multiple considerations, including market benchmarks and individual contributions.

For benefits-eligible roles, we offer a comprehensive and competitive benefits package covering health, retirement, wellbeing, and more, along with optional benefits to meet the diverse needs of our employees.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status or any other protected characteristic under applicable law. EEO/Disabled/Vets

Reasonable Accommodation

We are committed to providing reasonable accommodation for qualified individuals with disabilities in our job application and/or interview process. If you need assistance or accommodation in completing your application or participating in an interview due to a disability, email us at [e-mail]. Please put "Reasonable Accommodation" in the subject line and provide a brief description of the type of assistance you need. This inbox will not be monitored for application status updates.

Please refer to the privacy notice at the bottom of this page for submitting any data access, deletion, or other data subject rights requests, where permitted under your local laws and regulations.