Cyber Risk & Regulatory Compliance Analyst

About the opportunity

Evaluate internal control effectiveness, coordinate external audits, and manage IT risk registers across corporate systems.

What you will do

• check_circle Test IT general controls (ITGC) and automated application controls for SOX 404 and SOC 1/2 reports.
• check_circle Maintain comprehensive risk registers and track corrective action plan (CAP) remediation milestones.
• check_circle Interview system owners and collect audit evidence verifying access reviews, change management, and encryption.
• check_circle Support privacy compliance assessments addressing GDPR, CCPA/CPRA, and state privacy statutes.

What we are looking for

• arrow_circle_right 2+ years in cybersecurity compliance, IT risk, or internal audit.
• arrow_circle_right Bachelor’s degree in Management Information Systems, Cybersecurity, or Accounting/Finance.
• arrow_circle_right Working knowledge of SOC 2, HIPAA, NIST 800-53, or SOX frameworks.

Skills & Tech Stack