Senior IT Controls & Security Compliance Analyst

sbasite; Boca Raton (FL); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

401(k) retirement savings with company

Equity opportunity programs

Health, dental, vision insurance

Job summary

SBA Communications is seeking an IT Audit & Security Compliance professional to coordinate audits, review ITGC controls, and support risk management across the enterprise. You will partner with Internal Audit to ensure SOX compliance, while maintaining documentation and metrics for key security programs.

The role emphasizes communication, cross-team collaboration, and participation in incident response and governance activities; Hybrid work options may apply depending on the role.

Qualifications

• Experience performing IT audit and SOX ITGC controls.
• Familiarity with QAR, UAT, and SOC1/SOC2 frameworks.
• Knowledge of NIST Cybersecurity Frameworks and security controls.
• Excellent written and verbal communication; able to present findings clearly.

Responsibilities

• Coordinate IT audit meetings, walkthroughs, and evidence collection with Internal Audit.
• Conduct cyber-focused audits and report results to stakeholders.
• Maintain IT security and compliance docs, policies, and metrics.
• Communicate control design and risk to SBA stakeholders.
• Support enterprise teams to reduce cybersecurity risk and ensure policy adherence.
• Manage SharePoint sites and ensure content accuracy.
• Participate in annual audit, incident response, and recovery activities.

Skills

IT audit coordination

SOX ITGC controls

QAR reviews

UAT testing

SOC 1 / SOC 2 familiarity

NIST cybersecurity framework

communication & presentation

team collaboration

Tools

SharePoint

audit technologies

Job description

SBA Communications is seeking an IT Audit & Security Compliance professional to coordinate audits, review ITGC controls, and support risk management across the enterprise. You will partner with Internal Audit to ensure SOX compliance, while maintaining documentation and metrics for key security programs.

The role emphasizes communication, cross-team collaboration, and participation in incident response and governance activities; Hybrid work options may apply depending on the role.