SOX & IT Compliance Analyst — Risk & Controls

CACI International; Oklahoma City (OK); On-site; USD 68,000 - 142,000; Full time

Job summary

CACI is seeking an experienced IT Assurance and Compliance Analyst to help shape our IT control environment by assessing internal controls, coordinating SOX IT audits, validating regulatory compliance, and partnering with IT and business owners to drive remediation activities.

The role requires collaboration with cybersecurity, infrastructure, applications, and leadership teams to ensure processes meet internal and external standards, and to stay current on evolving requirements such as NIST,

Qualifications

• Bachelor’s degree in MIS, Information Assurance, Cybersecurity, Auditing, or related field.
• 2+ years IT auditing, ITGC testing, IT consulting or IT compliance.
• Experience communicating with technical and non-technical stakeholders.
• Knowledge of SOX, COSO, COBIT, ISO 27001, DFARS 252.204-7012, and NIST SP 800-171.
• Ability to identify control gaps, assess risk, and clearly communicate findings.

Responsibilities

• Coordinate IT SOX compliance activities (walkthroughs, evidence collection, ITGC testing support, remediation tracking, and audit readiness).
• Support IT SOX audits, ISO 27001 internal assessments, and third‑party compliance assessments for IT‑relevant services (NIST SP 800-171, CMMC).
• Monitor remediation and corrective action plans across Corporate and program enclaves to ensure timely resolution of findings.
• Develop, maintain, and improve compliance documentation and guidance (system security plans, policies, procedures, control libraries).
• Communicate and collaborate with IT teams to strengthen SOX control performance and security compliance.
• Build and maintain relationships across IT, cybersecurity, infrastructure, and business stakeholders.
• Assist with IT compliance and assurance special projects and process maturity initiatives.
• Research evolving IT regulatory requirements (SOX, SEC) and cybersecurity frameworks (NIST 800‑X, DFARS, CMMC).
• Maintain a continuous learning mindset as technologies evolve.

Skills

IT auditing

ITGC testing

IT compliance

Stakeholder communication

SOX

Regulatory awareness

Education

Bachelor’s degree in MIS, Information Assurance, Cybersecurity, Auditing, or related discipline

Tools

ServiceNow IRM

Job description

CACI is seeking an experienced IT Assurance and Compliance Analyst to help shape our IT control environment by assessing internal controls, coordinating SOX IT audits, validating regulatory compliance, and partnering with IT and business owners to drive remediation activities.

The role requires collaboration with cybersecurity, infrastructure, applications, and leadership teams to ensure processes meet internal and external standards, and to stay current on evolving requirements such as NIST,