IT Risk & Compliance Analyst

About the role

The Angi Compliance Team is responsible for ensuring controls are consistently applied within our environment to meet compliance obligations including Sarbanes-Oxley (SOX), PCI, GDPR, etc. and risk mitigation strategies. As a member of that team, you will work across the organization to design, implement and support the IT general controls (ITGC) framework, lead remediation efforts and identify emerging IT risks. You will be reporting to the IT Risk and Compliance Manager, while working closely with internal and external audit teams, engineering and product. You will continue to raise the bar to ensure our products, practices, systems and infrastructure remain compliant and meet the ever evolving needs of the greater business.

What you’ll do

• Assist with the development and maintenance of a rigorous ITGC compliance program
• Design and improve ITGCs across our products and infrastructure
• Work with a variety of internal teams to ensure their practices and products are compliant with IT SOX, GDPR, PCI and other related compliance obligationsDevelop, collect, and maintain necessary evidentiary documentation for internal and external auditorsWork with internal teams to design and maintain automated systems to help with continuous complianceIdentify risks and gaps in our ITGC framework to facilitate remediationAssist with the coordination of all required IT SOX internal controls testing including:
  • Planning, coordinating, and facilitating audit walkthroughs
  • Managing the distribution and receipt of external and internal audit requests
  • Communicating audit results and progress via written reports and oral presentations to various stakeholders
  • Working with control owners to periodically certify controls and processes
• Create and maintain relevant documentation including narratives, control documentation and process flowcharts

Who you are

• Bachelor’s degree in Information Systems, Engineering or other related field
• 2+ years of experience in audit, compliance, IT, information security or other related field, assessing, developing or implementing various IT controls, as it relates to access management, change management and IT operations
• Sound understanding of cloud IT control principles including logical access controls, change control, privileged access, segregation of duties, and computer operations
• Experience implementing, participating in, or conducting compliance or audit assessments (e.g. IT SOX, SOC 2, PCI assessments, etc.)
• A great collaborator with both technical and non-technical team members
• Exceptional organizational skills
• Excellent verbal and written communication skills
• Experience with scripting languages like Ruby, Python, Unix shell, a plus
• Experience with writing SQL queries, a plusExperience with Auditboard, a plus

We value diversity

We know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences.

Compensation & Benefits

• The salary band for this position ranges $90,000 - $117,000 commensurate with experience and performance. Compensation may vary based on factors such as cost of living.
• This position will be eligible for a competitive year end performance bonus & equity package.
• Full medical, dental, vision package to fit your needs
• Flexible vacation policy; work hard and take time when you need it
• Pet discount plans & retirement plan with company match (401K)
• The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world

#LI-Remote