Internal Audit, Controls, Compliance, and Risk

Overview

This role involves supporting Internal Audit, Controls, Compliance, & Risk activities within a cybersecurity-focused team. Primary duties include access governance, audit readiness, compliance, risk mitigation, and control execution across multiple business applications and technology platforms.

Responsibilities are execution-focused and include administering role-based access, supporting provisioning and deprovisioning controls, preparing audit evidence, performing SQL-based data analysis, handling MFA resets, and supporting compliance initiatives related to SOX, FedRAMP, and internal control requirements. The position also supports identification, escalation, and tracking of cybersecurity risks and control deficiencies.

The role requires close collaboration with IT, business stakeholders, application owners, security teams, auditors, and end users across multiple geographies to ensure access is appropriate, compliant, documented, and aligned with established controls while maintaining audit readiness.

Responsibilities

Audit & Compliance Execution

• Ensure access provisioning and deprovisioning activities are completed accurately and within established timelines to support audit readiness, mitigate risk, and maintain compliance with security and control standards.
• Collect, validate, and prepare audit evidence to support compliance and control testing activities.
• Execute SQL queries and scripts to retrieve, analyze, and validate data for audit and compliance requirements.
• Use Microsoft Excel for data analysis, reconciliations, reporting, and audit support activities.
• Document processes, controls, evidence inventories, and audit workpapers.
• Maintain audit readiness by ensuring evidence is complete, accurate, and readily available.

Access Administration & Operational Control Support

• Administer user access for enterprise applications, including provisioning, deprovisioning, role changes, account maintenance, and password resets.
• Review access requests to ensure they are appropriate, approved, documented, and aligned with role-based access controls, least-privilege principles, and internal control requirements.
• Support access-related incidents and account issues while ensuring activities are performed in accordance with security policies and compliance standards.
• Manage access administration requests through ServiceNow to maintain traceability, approval documentation, and audit support.
• Track and prioritize access governance activities, audit deliverables, account maintenance requests, and compliance tasks simultaneously.
• Escalate access exceptions, system limitations, or control concerns to application owners, security teams, or other appropriate stakeholders.
• Maintain accurate documentation of access requests, approvals, account changes, credential support, and remediation actions.

Cyber & Technology Support

• Work across multiple in-house and enterprise applications to support access governance, audit, and compliance activities.
• Support Azure-based environments through reporting, access reviews, compliance validation, and user administration.
• Assist with identification, tracking, escalation, and remediation of cyber risks and control deficiencies.
• Use ServiceNow to manage access-related requests, track work items, document approvals, and support workflow management.
• Research access discrepancies, entitlement issues, and control exceptions across various systems and platforms.
• Support user access reviews, role validations, temporary access analysis, and control-related activities as needed.

Requirements

• Bachelor’s degree in Information Systems, Information Technology, Computer Science, Business, Accounting, Cybersecurity, or a related field.
• 2+ years of experience supporting access management, audit, compliance, governance, risk, internal controls, cyber, or technology operations.
• Experience using Microsoft Excel for data analysis, reporting, and reconciliation activities.
• Experience executing and interpreting SQL queries and scripts.
• Experience working with ServiceNow or similar ticketing and workflow management platforms to manage access requests, approvals, and documentation.
• Familiarity with Microsoft Azure environments and cloud technologies.
• Strong understanding of access management concepts, including provisioning, deprovisioning, account maintenance, and role-based access.
• Strong organizational, prioritization, and time management skills, with the ability to manage multiple competing priorities and deadlines simultaneously.
• Exceptional attention to detail and commitment to accuracy.
• Strong written and verbal communication skills.
• Ability to learn new systems, applications, and business processes quickly.
• Ability to work independently and collaboratively in a fast-paced, changing environment.

Preferred Qualifications

• Experience supporting SOX, FedRAMP, SOC, ISO, NIST, or other regulatory and compliance frameworks.
• Certification(s) such as CRISC, CISA, CIA, CPA or equivalent either attained or underway.
• Knowledge of IT General Controls (ITGCs), access management controls, segregation of duties, and audit evidence requirements.
• Experience working with access reviews, user provisioning, deprovisioning, role-based access controls (RBAC), and least-privilege access models.
• Familiarity with Azure Active Directory, identity governance, or cloud security controls.
• Experience supporting internal or external audit activities.
• Exposure to automation, scripting, reporting tools, or process improvement initiatives.
• Experience working across multiple enterprise applications and business platforms.

Compensation & Benefits

• Minimum full-time salary range: $60,000 - $80,000.
• This position is eligible to participate in an annual incentive program.

Location & Work Schedule

• Workplace type: Remote
• Schedule: Full-time

Additional Information

• Applications will be accepted through 22nd September 2026. This window may be extended depending on business needs.

Equal Opportunity Statement

Equal Opportunity Employer. Employment decisions are based on qualifications, merit, and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status, or any other group protected by law. The employer actively seeks qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and are unable or limited in your ability to use or access the career site as a result of your disability, reasonable accommodations may be available upon request.