SOX & IT Compliance Analyst II: Risk & Controls

Tampa Electric Company; Tampa (FL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive Salary

401k Savings plan w/ company matching

Pension plan

Paid time off

Medical, Prescription Drug, & Dental

Tuition Assistance Program

Employee Assistance Program

Wellness Programs

On-site Fitness Centers

Bonus Plan and more!

Job summary

Tampa Electric Company is seeking a Compliance & Risk Analyst II to advance IT compliance programs including SOX, NERC CIP, PCI DSS, and governance controls. You will work under supervision to ensure audit readiness, manage compliance data, and help monitor regulatory requirements across IT and business units.

Responsibilities include coordinating with IT security, risk management, and operations to implement controls, prepare regulatory documentation, and deliver training.

Qualifications

• Intermediate knowledge of Sarbanes-Oxley regulatory requirements.
• Working knowledge of IT system landscape, configuration or controls.
• 5 years of experience in information technology, audit or utility environment; at least 2 years in IT security, audit or controls.

Responsibilities

• Assurance and information management to stay compliant with regulatory requirements (SOX, NERC CIP, PCI DSS, DFARS, Emera, DHS TSA).
• Administers IT Compliance Management Systems and GRC tools; collects evidence and supports audits.
• Documents quality problems and compliance issues; conducts quality audits and reports risks to IT leadership.
• Analyzes IT standards, ITIL, NIST, COBIT; maintains technology standards and procedures.
• Develops and delivers compliance training to staff; acts as internal quality consultant.
• Establishes performance analysis metrics within assigned areas.

Skills

SOX knowledge

Education

Bachelor's degree in Computer Science / Information Systems

Tools

SAP

Job description

Tampa Electric Company is seeking a Compliance & Risk Analyst II to advance IT compliance programs including SOX, NERC CIP, PCI DSS, and governance controls. You will work under supervision to ensure audit readiness, manage compliance data, and help monitor regulatory requirements across IT and business units.

Responsibilities include coordinating with IT security, risk management, and operations to implement controls, prepare regulatory documentation, and deliver training.