Overview
Skills
Job Details
STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!
This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.
Beware of scams. S3 never asks for money during its onboarding process.
Job Title: IT Risk & Compliance Analyst
Location: Tampa, FL
On Site Work
Contract Length: 6+ months
Job ref# 244334
Overview
Supports the organization s regulatory and governance requirements by executing SOX controls, identifying control gaps, validating evidence, and driving remediation efforts to completion. This role partners closely with IT, Audit, and Security teams to ensure regulatory alignment, operational integrity, and continuous improvement across IT processes and systems.
Required Skills & Experience
- 3+ years of IT Security, IT Audit, IT Compliance, or controls-related experience
(Junior candidates with 1 2 years will be considered at an adjusted rate.) - Proven experience identifying control gaps, drafting remediation plans, and driving remediation to completion
- Experience supporting or implementing SOX controls
- Assurance background including Audit/IT Compliance, compliance assessments, IT governance, and working with GRC tools
- Strong analytical mindset and ability to communicate findings clearly to stakeholders at all levels
Nice-to-Have Skills & Experience
- CISA or CRISC certification
- Experience with PCI controls and NIST Cybersecurity Framework
- Familiarity with:
- SAP
- ServiceNow
- AuditBoard
- Splunk
- Tenable
- CyberArk
- Risk assessments & vulnerability assessments
Key Responsibilities
SOX & Regulatory Compliance
- Coordinate implementation and monitoring of SOX controls for in-scope systems and processes
- Facilitate stakeholder discussions, validate evidence, and ensure timely completion of remediation efforts
- Ensure IT processes follow regulatory and contractual requirements including SOX, PCI, and internal policies
Evidence Collection & Documentation
- Collect, sample, and review compliance evidence
- Document non-compliance issues, develop recommendations, and drive remediation actions through resolution
- Escalate out-of-compliance items to senior management
- Maintain strict confidentiality and adhere to all security requirements
Governance, Risk, & Compliance (GRC)
- Administer IT Compliance Management Systems and GRC tool(s)
- Support implementation and enhancement of technology-based GRC solutions
- Monitor and report exceptions, risks, and exposures to IT senior leadership
Risk Management & Assessments
- Conduct fact-based assessments of new and existing systems, technologies, and regulatory controls
- Evaluate the effectiveness of compliance and governance controls
- Provide subject matter expertise to help internal teams manage risk, improve processes, and strengthen control environments
Cross-Functional Support
- Assist in information-sharing activities across partner utilities
- Gather metrics, complete surveys, and support compliance reporting
- Collaborate with internal stakeholders to support continuous improvement and operational governance