IT Auditor

Internal Job Title: Senior IT Control Analyst
Onsite Location & Status: League City, Texas - Datacenter | Full-time, Salaried
Reports to: Director, Governance, Risk & Compliance
Vacancies: Two
Join our Corporate Technology Services Governance, Risk, and Compliance team and help modernize how technology controls are designed, documented, and operated. We are hiring two Senior IT Control Analysts who can connect cybersecurity, IT operations, and audit requirements to build practical, efficient controls into everyday processes.
What You'll Do

• Evaluate current IT and cybersecurity processes, identify control gaps, and help redesign controls for greater efficiency and automation
• Document and maintain risk control matrices, risk assessments, minimum control standards, and the cybersecurity control framework
• Help design, build and organize the control environment within ServiceNow Integrated Risk Management, including workflow automation
• Support SOX/ICFR and IT General Control requirements, user access reviews, SOC 2 activities, regulatory inquiries, and external audits
• Partner with technical teams, control owners, cybersecurity, auditors, and governance groups to translate requirements into sustainable operating processes
• Provide compliance guidance, training, and support while monitoring ongoing control performance

What You Bring

• Bachelor's degree in (Cybersecurity, Management Information Systems, or Accounting) preferred or a combination of both relevant designations/ certifications and work experience considered
• Four to six years of relevant experience in cybersecurity, IT governance, technology controls, IT audit, or a related field
• Strong cybersecurity knowledge and the ability to understand how technology processes operate
• Experience evaluating or auditing IT controls and working with frameworks and regulations such as SOX, NIST CSF, COBIT, GDPR, CCPA, or SOC 2
• Ability to work independently, collaborate across a matrixed organization, and communicate effectively with technical and nontechnical stakeholders
• Experience with ServiceNow IRM or a comparable GRC platform is highly valued

Preferred Background

• IT auditor, cybersecurity professional, programmer, engineer, or risk professional with experience applying controls to technology processes
• Credentials such as CISA, CRISC, CRMP, CISM, CIA,
• Insurance experience is helpful but not required

Work Schedule and Compensation
The typical schedule is Monday through Friday, 8:00 a.m.-4:30 p.m. Central Time. Additional hours may occasionally be needed to meet critical deadlines; there is no on-call rotation. Occasional travel may be required.
If you enjoy building practical controls, improving processes, and helping technology teams meet complex cybersecurity and regulatory expectations, we encourage you to apply.