IT Compliance & Controls Analyst

Marlabs, a global AI and Digital Solutions Consulting firm, delivers intelligent solutions across AI, data, analytics, and product engineering. Since 2000, we have partnered with some of the largest healthcare, life sciences, financial services, and government organizations worldwide. As we continue to expand our global footprint, we have an exciting opportunity for a highly skilled IT Compliance & Controls Analyst to join our innovative and dynamic team.

IT Compliance & Controls Analyst | About You

As an IT Compliance & Controls Analyst, you will help ensure the organization's technology, security, and quality processes comply with internal controls and industry standards. You will work closely with Engineering, Security, Risk, and Product teams to assess control effectiveness, support audit activities, monitor compliance risks, and drive remediation efforts. The ideal candidate combines a strong understanding of IT controls, audit processes, and security governance with excellent analytical, documentation, and stakeholder management skills.

IT Compliance & Controls Analyst | Day-to-Day

• Perform testing and validation of IT General Controls (ITGC), Information Security, and Quality Management System (QMS) controls to ensure compliance with organizational standards.
• Assess the design and operational effectiveness of controls, identify control gaps, and support remediation efforts to strengthen compliance programs.
• Support internal and external audits, including SOC 2 and ISO 27001, through evidence collection, validation, audit coordination, and follow-up activities.
• Collaborate with Product, Engineering, Security, Risk, and QMS teams to implement, enhance, and maintain effective governance, risk, and compliance processes.
• Monitor compliance metrics, SLAs, risks, corrective actions, and key control indicators, providing regular reporting and visibility to stakeholders.
• Maintain audit-ready documentation and develop dashboards, metrics, and executive reports to support compliance monitoring and leadership decision-making.

IT Compliance & Controls Analyst | Skills & Experience

• 2-4 years of experience in IT Compliance, IT Audit, IT General Controls (ITGC), Risk Management, Information Security Governance, Internal Controls, or Quality Management Systems (QMS).
• Hands-on experience with ITGC and security controls, including Access Management, Identity Management, SDLC Controls, Change Management, Cybersecurity Controls, and Information Security Policies.
• Experience supporting compliance and audit initiatives, including SOC 2, ISO 27001, internal audits, evidence collection, audit coordination, and remediation tracking.
• Knowledge of risk and operational resilience practices, including Business Continuity, Disaster Recovery, Vulnerability Management, Patch Management, Encryption, Firewall Controls, and Logging & Monitoring.
• Proficiency with Microsoft Office, GRC platforms, evidence management tools, dashboards, and compliance reporting, with strong analytical, documentation, and stakeholder communication skills.