IT Business Analyst III or IV

Title : IT Business Analyst III or IV (Compliance & Controls Analyst)

Location : Frisco, TX or Overland Park, KS (OP, KS is preferred since managers sit here, but expects Frisco to have a larger candidate pool) - MUST be onsite 3 days per week

Duration : 1 year to start with potential for extension or conversion.

Level IV's require at least one certification + minimum 5-7+ YOE

Start Date : Anticipating Dec. 8

Overview

Client's IT Compliance team is expanding to support a significant government and industry compliance initiative (USGCI, PCI, and CMMC). We are looking for experienced IT Compliance & Controls Analysts who can balance technical acumen with strong communication skills to ensure our systems meet rigorous regulatory standards.

This role is ideal for professionals who thrive in high-volume, detail-oriented environments and can confidently engage cross-functional IT, audit, and compliance teams to assess, document, and strengthen control effectiveness across hundreds of applications.

Key Responsibilities

• Conduct IT general controls (ITGC) testing across applications, databases, and servers to validate design and operational effectiveness (PCI, USGCI, CMMC, NIST 800-171, etc.).
• Lead live walkthroughs with control owners and operators, assessing evidence and identifying potential control gaps.
• Document and escalate compliance issues in a collaborative and solutions-focused manner.
• Work within ServiceNow CMDB to track and manage control inventory, evidence, and system dependencies.
• Partner closely with IT and business stakeholders to support both internal and external audits for USGCI, PCI, NSA, HIPAA, GBLA, COPA, and other regulatory frameworks.
• Support large-scale audit readiness efforts-overseeing controls across 10-12 applications per analyst and contributing to testing across 182 total applications.
• Adapt quickly to new systems and environments; communicate findings clearly to technical and non-technical audiences.

Must-Have Qualifications

Preferred / Nice-to-Have

Why This Role

Internal Notes : Profile Focus :

Certifications to Prioritize :