Audit and Compliance Analyst

Job Summary

To support enterprise information security governance, the remote Audit and Compliance Analyst will manage policy and compliance processes, automate control activities, and coordinate reporting across the organization in a contract-to-hire role.

Key responsibilities

• Coordinate and administer the ServiceNow Policy and Compliance modules, ensuring accurate configuration and operation
• Collaborate with various stakeholders to support enterprise policy and compliance initiatives, including audits and assessments
• Implement and maintain continuous monitoring activities to identify policy or control violations and support remediation efforts

Required qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent IT/cybersecurity experience
• At least 3 years of experience with ServiceNow GRC/IRM and ideally ServiceNow ITSM modules
• Demonstrated understanding of cybersecurity risks, controls, and industry frameworks (e.g., NIST, ISO/IEC 27001)
• Practical experience applying governance, risk, and compliance (GRC) principles
• Familiarity with regulatory and assurance frameworks such as HIPAA, Sarbanes Oxley (SOX), and SOC 1 and SOC 2