IT Compliance Analyst

Qualification and Experience

• Educational Background: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field (or equivalent experience).
  

• Experience: 2–5 years of experience in IT compliance, IT audit, or a related role.
  

• Technical Knowledge: Familiarity with IT frameworks such as COBIT, ITIL, and security frameworks like NIST, ISO 27001.
  

• Compliance Knowledge: Strong understanding of regulations such as GDPA etc.
  

• Strong attention to detail and organizational skills.
  

• Ability to handle multiple tasks and deadlines concurrently.
  

• Analytical mindset with problem-solving aptitude.
  

• Confidentiality and ethical conduct in handling sensitive data.
  

• Compliance Monitoring and Assessment
  
• Conduct regular assessments of IT systems and processes to ensure compliance with applicable regulations (e.g., GDPA, ) and industry standards (e.g., ISO 27001, NIST).
  
• Monitor adherence to internal IT policies, procedures, and controls.-Respond to compliance-related incidents and support issue resolution.
  
• Policy and Documentation Support
  
• Collaborate with the IT Governance and Compliance Lead to develop, update, and maintain IT governance policies, standards, and guidelines.
  
• Assist in ensuring IT policy alignment with business objectives and regulatory standards.
  
• Maintain accurate and comprehensive documentation of compliance reports, assessments, and findings.
  
• Risk Identification and Mitigation
  
• Identify IT-related risks and vulnerabilities associated with regulatory and compliance obligations.
  
• Propose recommendations to mitigate compliance risks and improve governance practices.
  
• Support the tracking and resolution of compliance and audit findings.
  
• Audits and Reporting
  
• Assist in preparing for internal and external audits by gathering necessary documentation and ensuring readiness.
  
• Provide regular updates and reports to the IT Governance and Compliance Lead on compliance status, key risks, and remediation efforts.
  
• Support IT teams in audit activities, providing guidance to ensure successful outcomes.
  
• Stakeholder Collaboration