Senior IT Auditor

PeopleCaddie; Philadelphia (Philadelphia County); Remote; Full time

Job summary

A leading media company is seeking a Sr. Compliance Analyst focused on IT Analytics and Assurance. This fully remote position will involve supporting compliance efforts, overseeing technical compliance, and collaborating on cloud and DevSecOps processes. The ideal candidate will have extensive experience in technical compliance and a strong understanding of major cloud platforms.

Qualifications

• 5+ years of hands-on experience in technical compliance, cybersecurity, or cloud governance.
• Experience collecting and analyzing evidence for audits.
• Proficient in PCI DSS, SOX, and/or SOC 2 Type II frameworks.

Responsibilities

• Ensure compliance with PCI, SOX, and SOC 2 Type II frameworks.
• Evaluate compliance across AWS, GCP, and Azure, including EC2 and databases.
• Partner with DevOps and security teams to integrate compliance into CI/CD pipelines.

Skills

Technical compliance

Cybersecurity

Cloud governance

Scripting / API skills

Tools

AWS

GCP

Azure

ServiceNow

CI/CD tools

Job description

SR. COMPLIANCE ANALYST (IT) | LARGE MEDIA COMPANY | $60-$65 PER HOUR | 100% REMOTE - PHILADELPHIA, PA |

Client Large Media Conglomerate

Location : 100% Remote (Must reside in US)

Position : Sr. Compliance Analyst -IT Analytics and Assurance (Sr. IT Auditor)

Pay : $60-$65 per hour (W2)

Duration : 1+year (Extension Likely)

Role Overview :

Join the Global Streaming Technology Analytics and Assurance team to support compliance efforts and evaluate how evolving technologies impact our compliance posture. This role focuses on ensuring adherence to key frameworks, streamlining audits, and integrating compliance into cloud and DevSecOps processes.

Key Responsibilities :

Compliance & Security Oversight :

• Ensure compliance with PCI, SOX, and SOC 2 Type II frameworks.
• Collect and validate evidence for control requirements across business units.
• Oversee technical compliance areas : access management (UARs), asset management, secure development lifecycle, encryption, SoD, configuration and vulnerability management, secrets rotation.
• Recommend security best practices for cloud-based infrastructure.

Cloud & Infrastructure Compliance :

• Evaluate compliance across AWS, GCP, and Azure, including EC2, databases, and storage.
• Assess containerized environments (Kubernetes, Docker).
• Contribute to automating compliance monitoring in cloud environments.

CI / CD & DevSecOps Integration :

• Partner with DevOps and security teams to embed compliance into CI / CD pipelines (GitHub, Jenkins, Terraform, Atlantis).
• Develop Compliance as Code and Policy as Code solutions.
• Automate compliance evidence collection across tools and platforms.

Audit & Process Optimization :

• Support internal and external audits; ensure controls are implemented and well-documented.
• Create technical documentation aligned with compliance needs.
• Track compliance deliverables and project milestones.

Qualifications :

• 5+ years of hands-on experience in technical compliance, cybersecurity, or cloud governance.
• Direct experience collecting and analyzing evidence for audits.
• Proficient in PCI DSS, SOX, and / or SOC 2 Type II frameworks.
• Strong understanding of AWS, GCP, Azure, and associated security practices.
• Experience with Kubernetes, Docker, and container security.
• Familiarity with CI / CD tools and infrastructure-as-code practices.
• Scripting / API skills for compliance automation preferred.
• Knowledge of ServiceNow, CMDBs, or platforms like LogicGate a plus.
• Big 4 consulting experience strongly preferred.