IT Compliance Analyst

Riverside Research Institute - Beavercreek, OH

Full-time - Entry Level

Beavercreek, OH

51-100 employees

Professional, Scientific, and Technical Services

About the position

The IT Compliance Analyst ensures that the organization's IT infrastructure adheres to regulatory standards and internal policies while providing technical support for end-user issues. This role combines compliance knowledge with troubleshooting skills to monitor IT systems and assist users effectively. The ideal candidate is detail-oriented, analytical, and enjoys collaborative work across compliance and IT support functions.

Responsibilities

• Conduct compliance audits, assessments, and risk analysis to ensure adherence to standards such as CMMC, ISO 22301, ISO 27001, NIST 800-53 Rev 5, NIST 800-171.
• Collaborate with IT and security teams to establish and monitor compliance-related technical controls.
• Document and maintain compliance activities, including audit findings, corrective actions, and procedural updates.
• Support the development and implementation of IT compliance policies, ensuring systems and practices are aligned with regulations.
• Assist in preparing reports for internal and external audits, documenting compliance status, and creating mitigation plans for non-compliance issues.
• Stay informed on updates in compliance regulations and recommend updates to policies and practices.
• Conduct compliance training and awareness sessions for IT staff and end-users as needed.
• Provide technical support to end-users, responding to issues submitted via phone, email, or ticketing system.
• Diagnose and resolve hardware, software, and connectivity issues for desktops, laptops, and mobile devices.
• Track and document all support requests, including compliance-related incidents, using a ticketing system.
• Assist users with setup, configuration, and access management, ensuring adherence to IT security policies.
• Educate end-users on IT policies, cybersecurity best practices, and compliance requirements related to device and data usage.
• Escalate complex support issues to higher-level IT staff or specialized teams as needed.

Requirements

• Bachelor's degree in information technology, Cybersecurity, or related field (or equivalent experience).
• 2+ years of experience in IT compliance, IT support, or related roles.
• Working knowledge of government IT compliance frameworks (e.g., CMMC, ISO 22301, ISO 27001, NIST 800-53 Rev 5, NIST 800-171) and basic IT security concepts.
• Familiarity with ticketing systems (e.g., ServiceNow, Zendesk) and troubleshooting end-user issues.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication skills, both written and verbal.

Nice-to-haves

• Relevant certifications (e.g., Certified Information Systems Auditor (CISA), CompTIA Sec+, ITIL Foundation).
• Experience with Governance, Risk, and Compliance (GRC) tools (e.g., Microsoft Purview compliance manager) is a plus.
• Ability to work well in a cross-functional team environment, especially with compliance, IT support, and security teams.
• Strong organizational skills, with the ability to manage multiple tasks and maintain thorough documentation.

Benefits

• Competitive benefits package
• Awards and recognition program
• Personalized attention from ARS Senior Managers