Associate Analyst IT Compliance

Overview

The Associate Analyst, IT Compliance supports the organization's cybersecurity governance, risk management, and compliance programs in a dynamic and fast-paced environment. This role works closely with Information Security, IT, Internal Audit, business stakeholders, and control owners to help maintain compliance with regulatory, industry, and corporate requirements including Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), and third-party risk management activities.

Responsibilities

• Compliance Program Support
• Aids in the execution and maintenance of IT compliance programs, including SOX, PCI DSS, and other applicable regulatory, industry, and corporate requirements.
• Supports collection, organization, and validation of compliance evidence and documentation.
• Risk Management
• Aids in the identification, documentation, and tracking of cybersecurity and technology risks.
• Supports risk assessment activities and helps maintain risk registers, remediation plans, and related reporting.
• Audit & Assessment Support
• Supports internal and external audits by gathering requested documentation, coordinating evidence collection activities, tracking requests, and assisting with remediation follow-up activities.
• Policy & Standards Management
• Supports the maintenance, review, and communication of information security policies, standards, procedures, and guidelines.
• Aids in ensuring documentation remains current and aligned with organizational and regulatory requirements.
• Third-Party Risk Management
• Participates in vendor and third-party risk assessment processes by collecting information, reviewing submitted documentation, tracking assessment activities, and escalating identified concerns as appropriate.
• Control Monitoring & Validation
• Aids in monitoring the effectiveness of IT and cybersecurity controls.
• Reviews evidence submitted by control owners and supports control testing activities to validate compliance requirements.
• Data Analysis & Reporting
• Captures, analyzes, and interprets governance, risk, and compliance data.
• Assists with preparing reports, dashboards, metrics, and presentations that communicate compliance status, risk trends, and remediation activities.
• Relationship Management
• Develops working relationships with business and technology teams to support compliance initiatives, facilitate information gathering, and promote awareness of governance, risk, and compliance requirements.
• Continuous Improvement
• Identifies opportunities to improve governance, risk, compliance, and audit processes.
• Supports implementation of process improvements, standardization efforts, and documentation enhancements.

Essential for Success

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business Information Systems, Risk Management, or a related field, or equivalent work experience.
• 0-2 years of experience in cybersecurity, IT compliance, IT audit, risk management, governance, information security, or a related technology field.
• Foundational understanding of information security concepts, cybersecurity frameworks, and IT controls.
• Basic knowledge of compliance and risk management frameworks such as SOX, PCI DSS, NIST, ISO 27001, COBIT, or similar standards preferred.
• Strong analytical, organizational, and problem-solving skills with attention to detail.
• Ability to collect, analyze, and interpret data and documentation from multiple sources.
• Excellent verbal and written communication skills with the ability to interact effectively with both technical and non-technical stakeholders.
• Proficiency with Microsoft Office applications, particularly Excel, PowerPoint, and Word.
• Ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Self-motivated, proactive, and eager to learn new technologies, security concepts, and compliance requirements.
• Relevant coursework, internships, or certifications such as Security+, ISC2 CC, ITIL Foundation, or similar certifications are a plus.
• Flexibility of providing support during odd hours, weekends, and peak seasons.
• Minimal travel required (training/conferences).

Pay Range

The pay range for this position is $79,900.00 - $85,000.00 / Year with the opportunity for eligible associates to earn additional compensation pursuant to the Company’s bonus plan. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, shift, geographic location, and business and organizational needs.

Benefits

• Full-time positions are eligible for paid time off, health, dental, vision, life and disability benefits.
• Part-time positions are eligible for dental, vision, life, and disability benefits.
• For additional information concerning our benefits, visit our Benefits and Career Development page: https://learn.bswift.com/ulta

About Ulta Beauty

At Ulta Beauty (NASDAQ: ULTA), the possibilities are beautiful. Ulta Beauty is the largest North American beauty retailer and the premier beauty destination for cosmetics, fragrance, skin care products, hair care products and salon services. We bring possibilities to life through the power of beauty each and every day in our stores and online with more than 25,000 products from approximately 500 well-established and emerging beauty brands across all categories and price points, including Ulta Beauty’s own private label. Ulta Beauty also offers a full-service salon in every store featuring—hair, skin, brow, and make-up services. We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and the New York City Fair Chance Act.