> Markdown version of [/jobs/ext/1485416-associate-analyst-it-compliance](https://www.wearedevelopers.com/jobs/ext/1485416-associate-analyst-it-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Analyst IT Compliance - **Company:** ULTA Salon, Cosmetics & Fragrance, Inc. - **Location:** Bolingbrook, IL, United States - **Experience:** Starter - **Salary:** $79,900.0 - $85,000.0 - **Contract:** Internship / Graduate position - **Skills:** Microsoft Word, Microsoft Excel, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Security, Information Technology Audit, Microsoft Office, PCI Data Security Standards, Microsoft PowerPoint, IT General Controls (ITGC), Information Technology - **Published:** July 29, 2026 - **Apply:** https://careers.ulta.com/careers/jobs/512589?lang=en-us ## About the Role * Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business Information Systems, Risk Management, or a related field, or equivalent work experience. * 0-2 years of experience in cybersecurity, IT compliance, IT audit, risk management, governance, information security, or a related technology field. * Foundational understanding of information security concepts, cybersecurity frameworks, and IT controls. * Basic knowledge of compliance and risk management frameworks such as SOX, PCI DSS, NIST, ISO 27001, COBIT, or similar standards preferred. * Strong analytical, organizational, and problem-solving skills with attention to detail. * Ability to collect, analyze, and interpret data and documentation from multiple sources. * Excellent verbal and written communication skills with the ability to interact effectively with both technical and non-technical stakeholders. * Proficiency with Microsoft Office applications, particularly Excel, PowerPoint, and Word. * Ability to manage multiple priorities and meet deadlines in a fast-paced environment. * Strong customer service mindset and ability to build collaborative relationships across teams. * Self-motivated, proactive, and eager to learn new technologies, security concepts, and compliance requirements. * Relevant coursework, internships, or certifications such as Security+, ISC2 CC, ITIL Foundation, or similar certifications are a plus. * Flexibility of providing support during odd hours, weekends, and peak seasons. * Minimal travel required (training/conferences). ## Description The Associate Analyst, IT Compliance supports the organization's cybersecurity governance, risk management, and compliance programs in a dynamic and fast-paced environment. This role works closely with Information Security, IT, Internal Audit, business stakeholders, and control owners to help maintain compliance with regulatory, industry, and corporate requirements including Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), and third-party risk management activities. The Associate Analyst assists with the execution of compliance assessments, risk reviews, control monitoring, policy management, and audit support activities. The position develops a foundational understanding of information security frameworks, risk management practices, and regulatory requirements while contributing to the organization's overall cybersecurity and compliance objectives. YOU'LL ACCOMPLISH THESE GOALS BY: * Compliance Program Support Assists in the execution and maintenance of IT compliance programs, including SOX, PCI DSS, and other applicable regulatory, industry, and corporate requirements. Supports collection, organization, and validation of compliance evidence and documentation. * Risk Management Assists with the identification, documentation, and tracking of cybersecurity and technology risks. Supports risk assessment activities and helps maintain risk registers, remediation plans, and related reporting. * Audit & Assessment Support Supports internal and external audits by gathering requested documentation, coordinating evidence collection activities, tracking requests, and assisting with remediation follow-up activities. * Policy & Standards Management Supports the maintenance, review, and communication of information security policies, standards, procedures, and guidelines. Assists in ensuring documentation remains current and aligned with organizational and regulatory requirements. * Third-Party Risk Management Participates in vendor and third-party risk assessment processes by collecting information, reviewing submitted documentation, tracking assessment activities, and escalating identified concerns as appropriate. * Control Monitoring & Validation Assists with monitoring the effectiveness of IT and cybersecurity controls. Reviews evidence submitted by control owners and supports control testing activities to validate compliance requirements. * Data Analysis & Reporting Collects, analyzes, and interprets governance, risk, and compliance data. Assists with preparing reports, dashboards, metrics, and presentations that communicate compliance status, risk trends, and remediation activities. * Relationship Management Develops working relationships with business and technology teams to support compliance initiatives, facilitate information gathering, and promote awareness of governance, risk, and compliance requirements. * Continuous Improvement Identifies opportunities to improve governance, risk, compliance, and audit processes. Supports implementation of process improvements, standardization efforts, and documentation enhancements. ADDITIONAL RESPONSIBILITIES: * Coordinate with control owners to collect and validate compliance evidence for audits and assessments. * Assist with tracking remediation activities for identified control deficiencies, audit findings, and risk treatment plans. * Support quarterly compliance reviews and periodic control validation activities. * Maintain governance, risk, and compliance documentation repositories, including policies, standards, risk registers, and control inventories. * Monitor and document changes to relevant security frameworks, compliance requirements, and industry regulations. * Assist with cybersecurity awareness and compliance communications across IT and business teams. * Support development of governance and compliance metrics and reporting for leadership review. * Participate in special projects and initiatives related to cybersecurity governance, risk management, and regulatory compliance. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)