Risk and Compliance Specialist

• Partner with security, technology, and product teams to evaluate risks, improve control design, and support a consistent compliance posture across the organization
• Perform assessments of IT general controls, including user access, change governance, segregation of duties, operational procedures, asset oversight, encryption practices, and secure development controls
• Support internal and external audit activities by preparing documentation, organizing evidence, and helping address findings through clear remediation plans
• Apply recognized frameworks such as COBIT, ISO 27001, ISO 27018, NIST 800-53, and SOC-related standards to review controls and identify gaps or improvement opportunities
• Translate audit and regulatory requirements into repeatable processes that reduce manual effort while improving the quality and defensibility of compliance activities
• Create process maps, control narratives, and other supporting materials that clearly document workflows, risks, and control ownership
• Contribute to security risk assessments and control testing efforts to validate that policies and procedures are operating effectively
• Assist with the development or enhancement of automated evidence gathering and reporting methods, including integration with audit, ticketing, or asset management platforms where applicable

• Bachelor's degree in Risk Management, Information Systems, Cybersecurity, or a related discipline
• 1–3+ years of experience in risk management, internal audit, IT compliance, or a similar function
• Background in a Big 4 environment and possession of a recognized certification such as CISA or an equivalent credential
• Working knowledge of IT audit and compliance frameworks, including COBIT, ISO/IEC standards, NIST 800-53, and SOC controls
• Hands-on experience with ITGC reviews, audit support, audit findings management, and access control concepts
• Ability to explain technical risk clearly to varied audiences and convert regulatory requirements into practical business solutions
• Advanced proficiency with Microsoft Office applications and strong written and verbal communication skills

Familiarity with Python, PowerShell, or similar scripting/query tools, along with experience supporting automated compliance or evidence collection processes

• Medical, vision, dental, and life and disability insurance
• enrollment in company 401(k) plan