The Compliance Analyst - IT Risk and Controls - Randstad USA

The Compliance Analyst - IT Risk & Controls will be a critical member of the Cybersecurity and Risk Management team, serving as a 2nd Line practitioner. This role supports the Compliance Program Manager by collaborating with 1st Line internal controls teams, internal and external auditors, and managing third-party risks. The primary focus is to document and maintain compliance with internal control systems, enhance IT audit programs using established methodologies, and provide clear visibility into system health and performance. Ideal candidates should have a strong background in SOX compliance, experience managing both internal and external auditors, risk assessments, and implementation and remediation of controls. Experience with COSO, COBIT frameworks, and Internal Controls over Financial Reporting (ICFR) is preferred. 
location: SEATTLE, Washington
job type: Permanent
salary: $140,000 - 157,000 per year
work hours: 8am to 4pm
education: Bachelors
 
responsibilities:

• Maintain a comprehensive inventory of risks, controls, and procedures related to audit activities, collaborating with control owners and risk managers to ensure timely and accurate audit outcomes.

• Support interim and final audits of IT general and application controls, coordinating with internal and external auditors, especially during final audit stages.

• Assist in identifying and evaluating IT risks and relevant controls, including participating in annual risk and control assessments.

• Conduct quality assurance reviews of audit evidence, processes, and documentation before submission to auditors.

• Facilitate internal and external audit walkthroughs of IT controls, working closely with process and control owners.

• Aid 1st Line teams in identifying, documenting, and remediating issues discovered during audits.

• Document, manage, and maintain IS audit programs, procedures, and related artifacts.

• Ensure control performers and risk owners understand control objectives and the status of controls.

• Assess and monitor cybersecurity risks associated with key clients and suppliers.

• Experience level: Experienced
• Minimum 3 years of experience
• Education: Bachelors