IT Compliance Auditor

We are seeking an experienced IT Compliance Auditor to analyze internal processes and third-party vendor documentation, identify gaps against IT standards, and support compliance initiatives.

The ideal candidate will have strong analytical, communication, and project management skills, with a solid understanding of IT risk frameworks and governance practices.

Key Responsibilities

• Analyze internal processes and third-party vendor documentation to identify gaps against IT standards and requirements.
• Collaborate with internal and external stakeholders to assess IT risks, recommend mitigating controls, and evaluate security and operational impacts.
• Document IT risks and prepare reports for senior leadership.
• Support PCI-DSS compliance activities to maintain organizational compliance.
• Perform additional Governance, Risk, and Compliance (GRC) duties as assigned by the IT Risk Management team.

• 5 to 7 years of experience in IT compliance, risk management, GRC, or internal audit with a focus on technology assessments.
• Bachelor’s degree or higher in Information Technology, Computer Science, or a related field.
• Strong communication skills with the ability to convey complex ideas to various stakeholders.
• Excellent negotiation and critical analysis skills.
• Strong project management capabilities.
• Ability to challenge and escalate responses when necessary, based on process understanding.
• Solid understanding of PCI and/or NIST 800-53 frameworks.

• Experience in the retail industry or within Fortune 500 companies.