IT Compliance Analyst

• Assist in assessing risk statements and mapping controls to established compliance frameworks such as PCI and NIST.
• Participate in the execution of PCI assessments across the organization, including evidence collection, documentation review and coordination with control owners.
• Support subject matter experts in maintaining and validating control effectiveness, audit readiness and risk management processes.
• Contribute to governance, risk & compliance initiatives by assisting with compliance framework implementations.
• Help maintain risk registers, track remediation activities and follow up on action plans.
• Support internal and external audit activities by organizing documentation, coordinating stakeholders responses and validating evidence.
• Assist with policy and procedure reviews to ensure alignment with evolving regulatory and industry standards.
• Partner with technical teams to understand system environments and document control implementations accurately.

Do you have experience in Document review (document control)?, Do you have a Bachelor’s degree?, * Bachelor’s degree or higher in Computer Science, Computer Information Systems, or similar; or equivalent experience.

• Familiarity with industry frameworks and standards such as PCI-DSS, NIST CSF, NIST 800-53, SOC 2 or similar.
• Comfortable reading, interpreting and analyzing policy documents, audit reports and technical control descriptions.
• Strong attention to detail and ability to organize and manage documentation effectively.
• Basic understanding of IT infrastructure, cloud environments, applications and security controls.
• Strong written and verbal communication skills with the ability to collaborate across technical and non-technical teams.
• Ability to prioritize tasks and manage multiple initiatives in a structured, deadline-driven environment.
• A proactive mindset with a desire to learn and grow within the GRC domain.

Bonus (if applicable):

• Experience supporting PCI environments (Levels 1 - 3) or participating in formal PCI assessments.
• Experience working in organizations with strong adoption of AI technologies and understanding associated governance or compliance considerations.
• Exposure to GRC tooling (e.g., AuditBoard, Drata, Vanta, etc.).
• Relevant certifications such as Security+, CISA or similar.

Pulled from the full job description

• Pet insurance
• Parental leave
• 401(k)
• Health insurance
• Vision insurance
• Dental insurance
• Family leave, The base salary range for this role is $68,500 - $102,500.00.
• The specific salary offered to a candidate may be influenced by a variety of factors including but not limited to the candidate’s relevant experience, education, and work location. In addition, this position is eligible for 401k and a new hire and annual equity grant. C08+ positions may also be eligible for annual bonus.

We offer different types of insurance and benefits, such as medical/Rx, vision, dental, life, disability, hospital indemnity, critical illness, and accident. We offer parental leave, family services benefits, backup dependent care, flexible spending accounts, telemedicine, pet adoption reimbursement, employee assistance program, and many discounts including 10% off pet insurance and 20% off at Chewy.com.

Exempt salary team members have unlimited PTO, subject to manager approval. Team members will receive six paid holidays per year. Team members may be eligible for paid sick and family leave in compliance with applicable state and local regulations.