IT Compliance Specialist
- LanceSoft Inc.
1 Days Ago
NA
W2
Remote
5-10 Years
Required Skills: control testing, IRM, QA, data analysis
Job Description
Primary Purpose:
The IT Compliance Specialist, Assurance independently performs control testing and documentation across ISO 27001, PCI DSS, SOC 2, and SOX ITGC. Manages issues and policy exceptions in ServiceNow Integrated Risk Management (IRM), designs and executes UAT, and contributes to IRM data/reporting (Data Analyst/Business Analyst/QA/Test Engineer responsibilities as needed).
Roles & Responsibilities:
Plans and executes control tests; validates evidence sufficiency and traceability.
Owns IRM records for issues and policy exceptions; ensures timely updates and closure.
Designs UAT scripts for IRM changes; coordinates testers; tracks defects to resolution.
Performs data quality routines; reconciles control catalogs, ownership, and status fields
Creates or enhances standard reports/dashboards for assurance KPIs and trends.
Partners with system/control owners to remediate findings: documents remediation
Contributes to method improvements (test templates, sampling guidance, quality checklists)
Experience:
5 years in IT compliance/audit/control testing or IRM/QA/data analysis
Education:
Bachelor's Degree in information systems, computer science or related field from an accredited college or university preferred.
Certification preferred: ISO 27001 internal Auditor, PCI Professional (PCIP), CISA ( in progress).
The IT Compliance Specialist, Assurance independently performs control testing and documentation across ISO 27001, PCI DSS, SOC 2, and SOX ITGC. Manages issues and policy exceptions in ServiceNow Integrated Risk Management (IRM), designs and executes UAT, and contributes to IRM data/reporting (Data Analyst/Business Analyst/QA/Test Engineer responsibilities as needed).
Roles & Responsibilities:
Plans and executes control tests; validates evidence sufficiency and traceability.
Owns IRM records for issues and policy exceptions; ensures timely updates and closure.
Designs UAT scripts for IRM changes; coordinates testers; tracks defects to resolution.
Performs data quality routines; reconciles control catalogs, ownership, and status fields
Creates or enhances standard reports/dashboards for assurance KPIs and trends.
Partners with system/control owners to remediate findings: documents remediation
Contributes to method improvements (test templates, sampling guidance, quality checklists)
Experience:
5 years in IT compliance/audit/control testing or IRM/QA/data analysis
Education:
Bachelor's Degree in information systems, computer science or related field from an accredited college or university preferred.
Certification preferred: ISO 27001 internal Auditor, PCI Professional (PCIP), CISA ( in progress).
