Risk & Compliance Analyst

The Risk & Compliance Analyst supports the organization's information security, risk, and compliance programs by monitoring, evaluating, and maintaining IT security frameworks, policies, standards, controls, and best practices. This role performs compliance and audit activities, evaluates technical evidence from cloud and hosting environments, and works with stakeholders to identify and remediate control gaps.

The Risk & Compliance Analyst independently manages assigned projects and compliance activities from initiation through completion and contributes to continuous improvement through the use of automation, scripting, data analysis, and AI-enabled technologies. The role requires strong technical curiosity, ownership, analytical thinking, and the ability to rapidly learn new technologies, processes, tools, and applications.

What you'll be doing

• Execute and monitor compliance activities related to IT security frameworks, policies, standards, controls, and industry best practices; analyze findings, identify root causes and control gaps; and communicate results and recommendations to stakeholders and leadership.
• Coordinate and support internal and external IT security audits, including gathering, reviewing, validating, organizing, and presenting audit evidence and working with control owners to address evidence gaps and remediation activities.
• Review and evaluate technical audit evidence from cloud, SaaS, hosting, infrastructure, identity, network, security, and other technology environments to determine whether controls are appropriately designed, implemented, and operating effectively.
• Translate industry standards, regulatory requirements, contractual obligations, and audit criteria into actionable security controls, policies, procedures, testing requirements, and compliance activities.
• Independently manage assigned compliance projects and workstreams from planning through completion, including defining activities, coordinating stakeholders, tracking milestones and dependencies, resolving issues, and delivering required outcomes with limited supervision.
• Identify opportunities to automate repetitive compliance, audit, evidence collection, testing, reporting, and data analysis activities; develop or support scripts, integrations, workflows, and AI-enabled solutions to improve efficiency and scalability.
• Build and maintain productive relationships with internal stakeholders, control owners, technology teams, auditors, and other compliance partners while asking probing questions and challenging assumptions when additional information or evidence is required.
• Manage multiple concurrent audits, compliance activities, projects, and deadlines; maintain accurate documentation and proactively communicate risks, issues, dependencies, and status.
• Assist the sales team by responding to security questionnaires and questions submitted by customers and prospects.

What you'll likely bring

• Strong working knowledge of information security, IT risk, compliance, audit principles, and control frameworks, with sufficient technical understanding of cloud and hosted environments to analyze system configurations, access controls, logs, infrastructure evidence, security controls, and other technical audit artifacts.
• Fluency with modern AI technologies, including generative AI, large language models, AI agents, and AI-enabled automation, with the ability to understand their capabilities, limitations, security and compliance considerations, and appropriate application to compliance processes.
• Working knowledge of scripting and development concepts, with an interest and ability to develop automation that reduces manual compliance activities.
• Strong project management, analytical, problem-solving, and organizational skills, including the ability to independently take ownership of work, manage multiple competing priorities and projects, meet deadlines, and drive activities through completion.
• Demonstrated curiosity and learning agility, including the ability to ask effective questions, investigate unfamiliar technical concepts, challenge incomplete information, and rapidly learn new technologies, processes, tools, applications, and compliance requirements.

What can set you apart

• 3+ years of applicable experience in IT compliance, governance, risk and compliance (GRC), IT audit, information security, technology risk, or a related field preferred.
• Bachelor's degree or equivalent combination of education and relevant experience.
• Experience reviewing or supporting audits of cloud, hosted, SaaS, or other technology environments preferred.
• Experience with scripting, automation, APIs, data analysis, AI technologies, or development concepts preferred.
• Proficiency with data analysis tools and experience working with compliance, audit, risk management, data analysis, or workflow tools preferred.

#LI-CM1

#HYBRID

Whatever your career journey, we’ll help you find the right path. Through our training courses, mentorship, and continuous support, you’ll get everything you need to thrive. At Epicor, your success is our success. And that success really matters, because we’re the essential partners for the world’s most essential businesses—the hardworking companies who make, move, and sell the things the world needs.

Recruiter:

Christi McCall