Analyst II, Tech Governance & Assurance

What you'll do

• Coordinate SOC 1, SOC 2, and SOX audits by managing evidence collection and auditor communications.
• Perform first-line risk assessments and self-testing for IT General Controls (ITGC) across various domains.
• Identify control gaps and design deficiencies to develop remediation plans before formal audit periods.
• Maintain control narratives, risk-and-control matrices, and internal evidence repositories.
• Manage compliance programs for CCPA/CPRA cybersecurity requirements and NYDFS attestation processes.
• Design and implement automated control testing and continuous monitoring to reduce manual effort.
• Develop automated evidence pulls and testing scripts using GRC platforms or data tools.

What we're looking for

• 4+ years of experience in IT audit with hands-on exposure to SOX IT General Control and SOC 1/SOC 2 engagements.
• 2+ years of experience with IT General Controls and control frameworks such as COSO, COBIT, or SOC Trust Services Criteria.
• 2+ years of experience facilitating audits and managing relationships with external, service, or internal auditors.
• Experience in internal audit or Big Four accounting firms (preferred).
• Experience in the financial services or banking industry (preferred).
• Familiarity with data privacy and cybersecurity regulations such as CCPA/CPRA and NYDFS 23 NYCRR 500 (preferred).
• CISA, CIA, CISSP, CRISC, or CPA certifications; GRC platform experience; and scripting skills like SQL or Python (preferred).