The Analyst (f/m/d), Cyber & IT Control Compliance supports the assessment of technology, cybersecurity, and IT controls to ensure they are properly designed, implemented, and operating effectively. This role helps validate control alignment to identify risks, supports remediation tracking and reporting, and works with cross-functional teams to maintain compliance with internal standards and frameworks such as NIST, NIS2, DORA, ISO 27001/27005, and PCI DSS, using ServiceNow IRM or similar GRC tools.
Responsibilities:
- Understanding of NIST CSF and frameworks and regulations such as NIS2, DORA, ISO 27001/27005, and PCI DSS.
- Ability to interpret, apply, and ensure compliance with established policies, procedures, and standards.
- Maintain control assessment records, evidence, findings, and remediation items in ServiceNow IRM or similar GRC tools.
- Partner with IT, Compliance and business teams to gather evidence and support assessment activities.
- Support audit, compliance, and regulatory readiness by maintaining accurate control documentation and assessment evidence.
- Assist with development and improvement of control assessment templates, procedures, and reporting processes.
- Prepare control compliance summaries, dashboards, and status reports for leadership and governance forums.
Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
- 2-5+ years of experience in cybersecurity, IT compliance, IT controls, information security, audit, risk, or related functions.
- Hands-on experience supporting or performing control assessments, control testing, compliance reviews, or control validation activities.
- Basic to strong understanding of technology and cybersecurity control frameworks, including NIST CSF and NIST RMF,EU regulation.
- Familiarity with applicable regulations and standards such as NIS2, DORA, ISO 27001/27005, PCI DSS, and related security/control requirements.
- Hands-on experience with GRC platforms, preferably ServiceNow IRM, including control records, workflows, issue tracking, and reporting.
- Strong analytical, documentation, and evidence review skills with attention to detail.
- Ability to communicate control gaps and compliance issues clearly to technical and non-technical stakeholders.
- Strong written and verbal communication skills and ability to work cross-functionally with Cybersecurity, IT, Risk, Compliance, and Audit teams.
- Relevant certifications such as Security+, CISA, CRISC, or CISM are a plus.
