Sr. IT Compliance Analyst required for a Long Term Onsite Project at Mesa, AZ

We are trying to source Sr. IT Compliance Analyst for our direct client for a Long Term onsite Position at Mesa, Arizona. We need Senior Compliance Analyst whose responsibility is to ensure the processes and associated controls for the compliance frameworks are designed, managed, and assessed for effectiveness to reduce overall compliance risk across the organization.

This includes performing continuous monitoring and driving audit actions to ensure adherence to the in- scope compliance frameworks.

As part of their day to day, the IT Compliance Analyst will liaise closely with Internal Audit and key stakeholders to ensure full alignment on all IT regulatory compliance issues.

It is a Long - Term Onsite Position based in Mesa, Arizona.

Key Responsibilities

Audit & Compliance

• Establish a comprehensive understanding of the organization's audit and compliance programs (i.e., SOX, PCI, ISO 27001, SOC 2, Cyber Essentials +, FedRAMP, etc.).

Serve as the:

• primary subject matter expert leading assigned audit program(s).
• backup support to other audit programs as assigned.
• This includes scoping the audit, scheduling activities, leading calls, coordinating and fulfilling document request lists, leading walkthroughs, and other audit tasks as appropriate.
• Work collaboratively with control owners on audit remediation work.

Policies & Procedures

• Assist control owners in development and refinement of controls (i.e., policy requirements and/or ITGCs) for in-scope systems.
• Work collaboratively with internal and external auditors to ensure controls are consistent with expectations and leading practices.
• Assist control owners to identify any potential issues prior to formal audits.

Documentation & Program Maintenance

• Efficiently manage tasks, prioritize responsibilities, and maintain order in a fast- paced environment.
• Perform and support the continuous monitoring of IT controls.
• Report and present metrics from monitoring and audit activities to senior leadership.

Support general tasks including but not limited to

1. process improvement initiatives
2. RFI/RFP/contract responses
3. risk management assessments
4. vendor risk reviews
5. ticket responses
6. project work.