PRIMARY PURPOSE
: The IT Compliance Specialist, Assurance independently performs control testing
and documentation across ISO 27001, PCI DSS, SOC 2, and SOX ITGC. Manages issues and policy
exceptions in ServiceNow Integrated Risk Management (IRM), designs and executes UAT, and contributes
to IRM data/reporting (Data Analyst/Business Analyst/QA/Test Engineer responsibilities as needed).
ESSENTIAL FUNCTIONS AND RESPONSIBILITIES
Plans and executes control tests; validates evidence sufficiency and traceability.
Owns IRM records for issues and policy exceptions; ensures timely updates and closure.
Designs UAT scripts for IRM changes; coordinates testers; tracks defects to resolution.
Performs data quality routines; reconciles control catalogs, ownership, and status fields.
Creates or enhances standard reports/dashboards for assurance KPIs and trends.
Partners with system/control owners to remediate findings:documents remediation
Contributes to method improvements (test templates, sampling guidance, quality checklists)
ADDITIONAL FUNCTIONS and RESPONSIBILITIES
Performs other duties as assigned.
Travel as required
Skills:
Skills & Knowledge
Solid understanding of control testing methods, including sampling, walkthroughs, and reperformanc
Working proficiency with Service Now, IRM, including records manageement, workflows, UAT and reporting
Strong analytical and problem-solving skills: intermediate proficiency in Excel, Power BI, or equivalent tools
Clear and effective communication with control owners, ensuring consistent and high-quality documentation
Ability to apply conceptual thinking and work, independently while managing multiple priorities
Strong time management and organizational skills to handle competing tasks effectively
Ability to comply with company policies and applicable laws and regulations
Comfortable with occasional travel and participation in meetings (virtual or in-person)
Solid understanding of control testing methods, including sampling, walkthroughs, and re
performance
Clear and effective communication with control owners, ensuring consistent and high-quality
Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.
Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
