Analyst IT Compliance & Controls
We are engineers, high line workers, power plant managers, accountants, electricians, project coordinators, risk analysts, customer service operators, community representatives, safety and security specialists, communicators, human resources partners, information technology technicians and much, much more. We are 3,500 people committed to enhancing the lives of the communities we serve. Together, we are powering the growth and success of our community progress every day!
Pay Grade
11
DEADLINE TO APPLY: July 30, 2026
*Qualifications may warrant placement in a different job level (Levels 1-4)
Hiring for 2 positions
Position Summary
The IT Compliance & Controls Analyst supports the organization's IT compliance and control environment through IT General Controls (ITGC) testing, audit support, control monitoring, remediation, and compliance initiatives. Reporting to the Manager, IT Compliance, Controls & Oversight. This role partners with IT, business stakeholders, and auditors to ensure compliance with regulatory requirements, organizational policies, and industry standards. Depending on level, the analyst performs hands-on compliance activities, identifies and remediates control gaps, designs and enhances IT controls, leads complex audits and compliance initiatives, and provides guidance to strengthen the organization's overall control environment.
Tasks and Responsibilities
- Assist with execution of IT compliance activities and routine ITGC testing.
- Support evidence gathering for internal and external audits.
- Help track remediation activities and follow up with IT teams.
- Participate in quality assurance reviews under guidance from senior analysts.
- Document processes, controls, and audit requests with accuracy.
- Learn and apply foundational compliance frameworks and IT control concepts.
- Support identification of potential control gaps and escalate findings to senior staff.
Minimum Skills
Minimum Knowledge and Abilities
Preferred Qualifications
- Internship or project experience in IT, cybersecurity, or audit.
- Exposure to frameworks such as SOX, NERC CIP, ISO 27001, or COBIT.
- Basic understanding of risk management concepts.
- Experience with ticketing or workflow tools (e.g., ServiceNow, Jira).
- Interest in pursuing certifications such as CISA, Security+, or ITIL.
Competencies
Minimum Education
Required Certifications
Working Environment
Physical Demands
CPS Energy does not discriminate against applicants or employees. CPS Energy is committed to providing equal opportunity in all of its employment practices, including selection, hiring, promotion, transfers and compensation, to all qualified applicants and employees without regard to race, religion, color, sex, sexual orientation, gender identity, national origin, citizenship status, veteran status, pregnancy, age, disability, genetic information or any other protected status. CPS Energy will comply with all laws and regulations.
