IT Auditor

Internal Job Title: Senior IT Control Analyst
Onsite Location & Status: League City, Texas — Datacenter | Full-time, Salaried
Reports to: Director, Governance, Risk & Compliance
Vacancies: Two

Join our Corporate Technology Services Governance, Risk, and Compliance team and help modernize how technology controls are designed, documented, and operated. We are hiring two Senior IT Control Analysts who can connect cybersecurity, IT operations, and audit requirements to build practical, efficient controls into everyday processes.

What You’ll Do

Evaluate current IT and cybersecurity processes, identify control gaps, and help redesign controls for greater efficiency and automation
Document and maintain risk control matrices, risk assessments, minimum control standards, and the cybersecurity control framework
Help design, build and organize the control environment within ServiceNow Integrated Risk Management, including workflow automation
Support SOX/ICFR and IT General Control requirements, user access reviews, SOC 2 activities, regulatory inquiries, and external audits
Partner with technical teams, control owners, cybersecurity, auditors, and governance groups to translate requirements into sustainable operating processes
Provide compliance guidance, training, and support while monitoring ongoing control performance

What You Bring

Bachelor’s degree in (Cybersecurity, Management Information Systems, or Accounting) preferred or a combination of both relevant designations/ certifications and work experience considered
Four to six years of relevant experience in cybersecurity, IT governance, technology controls, IT audit, or a related field
Strong cybersecurity knowledge and the ability to understand how technology processes operate
Experience evaluating or auditing IT controls and working with frameworks and regulations such as SOX, NIST CSF, COBIT, GDPR, CCPA, or SOC 2
Ability to work independently, collaborate across a matrixed organization, and communicate effectively with technical and nontechnical stakeholders
Experience with ServiceNow IRM or a comparable GRC platform is highly valued

Preferred Background

IT auditor, cybersecurity professional, programmer, engineer, or risk professional with experience applying controls to technology processes
Credentials such as CISA, CRISC, CRMP, CISM, CIA,
Insurance experience is helpful but not required

Work Schedule and Compensation
The typical schedule is Monday through Friday, 8:00 a.m.–4:30 p.m. Central Time. Additional hours may occasionally be needed to meet critical deadlines; there is no on-call rotation. Occasional travel may be required.

If you enjoy building practical controls, improving processes, and helping technology teams meet complex cybersecurity and regulatory expectations, we encourage you to apply.