Analyst IT Control Compliance (f/m/d)

Overview

The Analyst in Cyber & IT Control Compliance plays a vital role in evaluating and validating technology, cybersecurity, and IT controls to ensure their effective design and implementation. This role focuses on aligning controls with key frameworks and regulations including NIST CSF, NIS2, DORA, ISO 27001/27005, and PCI DSS, leveraging platforms like ServiceNow IRM or comparable Governance, Risk, and Compliance (GRC) tools.

Key Responsibilities

• Develop a thorough understanding of cybersecurity frameworks such as NIST CSF and relevant regulations including NIS2, DORA, ISO 27001/27005, and PCI DSS.
• Apply established policies, standards, and procedures to ensure compliance within the organization.
• Maintain detailed records of control assessments, evidence, findings, and remediation items within ServiceNow IRM or similar GRC platforms.
• Collaborate effectively with IT, Compliance, and business units to collect necessary evidence and support control assessment activities.
• Support audit readiness and regulatory compliance efforts by ensuring accurate control documentation and evidence management.
• Contribute to the refinement and development of templates, procedures, and reporting mechanisms for control assessments.
• Prepare comprehensive summary reports, dashboards, and status updates on control compliance for leadership and governance committees.

Qualifications and Experience

• Possess a Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• Have 2 to 5 or more years of hands-on experience in cybersecurity, IT compliance, IT controls, information security, audit, risk management, or associated roles.
• Experience in supporting or conducting control assessments, testing, compliance reviews, or validation activities.
• Solid comprehension of technology and cybersecurity control frameworks such as NIST CSF and RMF, as well as European regulations.
• Acquainted with relevant standards including NIS2, DORA, ISO 27001/27005, PCI DSS, and their control/security mandates.
• Practical experience using Governance, Risk and Compliance tools, preferably ServiceNow IRM, particularly in managing control documentation, workflows, issue tracking, and reporting.
• Exhibit strong analytical capabilities with a keen eye for documentation accuracy and evidence evaluation.
• Excellent communication skills to articulate control deficiencies and compliance matters to both technical and non-technical audiences.
• Capacity to work collaboratively across Cybersecurity, IT, Risk, Compliance, and Audit teams with effective written and verbal communication.
• Certifications such as Security+, CISA, CRISC, or CISM are advantageous.