2025-7799 IT Compliance Analyst - Level II

Schedule: Night Shift

Arch is seeking a proactive, results-driven individual to join our Global Information Security team as an IT Compliance Analyst.  As an IT Compliance Analyst, you will have the opportunity to gain hands-on experience with technology processes, risks, and controls. You will also build relationships with technology and security leaders during your participation in IT Compliance program activities. This position offers the opportunity to grow through demonstrated performance and prepare for future leadership responsibilities. 

• Serve as a team member in building our Second Line of Defense within the Global Information Security group 
• Serve as a team member on IT Compliance projects and/or Information Security program efforts 
• Perform primary sampling and efficacy testing of current Information Security controls 
• Perform Second Line of Defense control testing activities including interviews, walkthroughs, testing, wrap-up, and issue follow-up 
• Identify opportunities and lead efforts to automate aspects of Second Line of Defense controls testing, reducing manual effort and enhancing coverage and accuracy 
• Utilize data analytic tools, programming languages, and big data technologies to identify, extract, transform, and analyze complex datasets for reporting purposes 
• Identify trends, patterns, and anomalies, and translate these insights into actionable recommendations for the IA team and / or stakeholders 

Required Skills:

• 1 - 3 years of IT-related audit/SOX ITGC experience in a corporate organization 
• Solid understanding of audit and/or IT Controls planning, testing, and reporting requirements 
• Proficient in working with MS Excel (e.g., vlookups), MS Word, Visio, PowerPoint, ServiceNow 
• Confident, with strong interpersonal and communication skills (both written and verbal) 
• Excellent attention to detail 

• Degree or equivalent in Computer Science, Cybersecurity, Data Science, Computer Programming 
• Obtained or in the pursuit of a recognized qualification (e.g., CGRC, CISSP, CRISC, CISM, CIA, CISA)