Analyst IT Compliance & Controls

Position Summary

The IT Compliance & Controls Analyst supports the organization's IT compliance and control environment through IT General Controls (ITGC) testing, audit support, control monitoring, remediation, and compliance initiatives. Reporting to the Manager, IT Compliance, Controls & Oversight. This role partners with IT, business stakeholders, and auditors to ensure compliance with regulatory requirements, organizational policies, and industry standards. Depending on level, the analyst performs hands-on compliance activities, identifies and remediates control gaps, designs and enhances IT controls, leads complex audits and compliance initiatives, and provides guidance to strengthen the organization's overall control environment.

Tasks And Responsibilities

• Aid in executing IT compliance activities and routine ITGC testing.
• Support evidence gathering for internal and external audits.
• Track remediation activities and follow up with IT teams.
• Participate in quality assurance reviews under guidance from senior analysts.
• Document processes, controls, and audit requests with accuracy.
• Learn and apply foundational compliance frameworks and IT control concepts.
• Identify potential control gaps and escalate findings to senior staff.

Qualifications

• Minimum Skills:
• Basic understanding of IT operations and security principles.
• Strong attention to detail and willingness to learn compliance and audit methodologies.
• Effective communication and documentation skills.
• Ability to work collaboratively and follow established procedures.
• Familiarity with IT controls or audit concepts is a plus.
• Preferred Qualifications:
• Internship or project experience in IT, cybersecurity, or audit.
• Exposure to frameworks such as SOX, NERC CIP, ISO 27001, or COBIT.
• Basic understanding of risk management concepts.
• Experience with ticketing or workflow tools (e.g., ServiceNow, Jira).
• Interest in pursuing certifications such as CISA, Security+, or ITIL.

Minimum Education

A bachelor’s degree in Information Technology, Computer Science, another field, or equivalent experience.

Required Certifications

N/A

Competencies

• Communicates Effectively
• Driving Continuous Improvement
• Delivering High Quality Work
• Demonstrating Initiative
• Acting as a Champion for Change
• Evaluating and Implementing Ideas

Physical Demands

Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

CPS Energy Commitment

CPS Energy does not discriminate against applicants or employees. CPS Energy is committed to providing equal opportunity in all of its employment practices, including selection, hiring, promotion, transfers and compensation, to all qualified applicants and employees without regard to race, religion, color, sex, sexual orientation, gender identity, national origin, citizenship status, veteran status, pregnancy, age, disability, genetic information or any other protected status. CPS Energy will comply with all laws and regulations.