Analyst IT Compliance & Controls 3

We are engineers, high line workers, power plant managers, accountants, electricians, project coordinators, risk analysts, customer service operators, community representatives, safety and security specialists, communicators, human resources partners, information technology technicians and much, much more. We are 3,500 people committed to enhancing the lives of the communities we serve. Together, we are powering the growth and success of our community progress every day!

Deadline to apply: Open Until Filled Pay Grade

14

Qualifications may warrant placement in a different job level (Levels 3-4)

Position Summary

The IT Compliance & Controls Analyst 3 is an experienced individual contributor responsible for leading ITGC testing cycles, supporting complex audits, identifying control gaps, and helping design and implement new or enhanced controls. Reporting to the Manager, IT Compliance, Controls & Oversight, this role interacts regularly with auditors, IT leadership, and cross-functional teams to ensure a strong control environment.

Tasks and Responsibilities

• Lead ITGC testing activities and ensure high-quality documentation.
• Serve as a primary point of contact for internal and external auditors.
• Identify control gaps and collaborate with IT teams to design and implement new or improved controls.
• Lead remediation tracking, ensuring timely and effective resolution of findings.
• Conduct in-depth quality assurance reviews of IT processes and controls.
• Prepare executive-ready reports, dashboards, and presentations.
• Provide guidance and mentorship to junior analysts.
• Monitor changes in regulatory requirements and assess impacts on IT controls.

Minimum Skills

Minimum Knowledge and Abilities

Advanced experience in IT compliance, IT audit, or ITGC testing. Strong understanding of IT control frameworks and audit methodologies. Demonstrated ability to identify control gaps and develop effective solutions. Excellent communication skills, including presenting to management and auditors. Strong organizational and project coordination abilities. Professional certifications (CISA, CISSP, ITIL, or similar).

Preferred Qualifications

• Experience designing or implementing IT controls.
• Prior responsibility for leading audit engagements or ITGC cycles.
• Strong understanding of regulatory requirements for public utilities.
• Experience with enterprise GRC platforms.
• Advanced certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor.

Competencies

Communicates Effectively Driving Continuous Improvement Delivering High Quality Work Demonstrating Initiative Acting as a Champion for Change Evaluating and Implementing Ideas

Minimum Education

Bachelor’s degree in Information Technology, Computer Science, another field, or equivalent experience.

Required Certifications

Working Environment

Indoor work, operating computer, manual dexterity, talking, hearing, and repetitive motion. Use of personal computing equipment, telephone, multi-functioning printer and calculator. Ability to travel to and from meetings, training sessions or other business related events. Hybrid work model (subject to department and business needs). May require occasional travel to CPS Energy facilities, audit meetings, or regulatory events.

Physical Demands

Exerting up to 10 pounds of force occasionally, and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

CPS Energy does not discriminate against applicants or employees. CPS Energy is committed to providing equal opportunity in all of its employment practices, including selection, hiring, promotion, transfers and compensation, to all qualified applicants and employees without regard to race, religion, color, sex, sexual orientation, gender identity, national origin, citizenship status, veteran status, pregnancy, age, disability, genetic information or any other protected status. CPS Energy will comply with all laws and regulations.