Technology Compliance Analyst

As a Technology Compliance Analyst, you'll be joining our diverse, fast paced Internal Audit team to ensure the security and safety of our members. This is a highly collaborative role where you will be working cross-functionally to identify and mitigate risk. You will have the opportunity to lead and execute various audits across multiple products and services against the AICPA Trust Services Criteria, ISO 27001 Standard, FTC Data Security, etc. You will assist in performing audit risk assessments and develop audit objectives and procedures. You should have a proven track record establishing relationships and working cross-functionally to drive time critical results, issues tracking and reporting. 

• Perform walkthroughs in order to assist with process documentation
• Work closely with the infrastructure security teams to test and provide requirement over cloud security
• Test internal controls and identify control deficiencies, analyze impact and exposure, and recommend improvements
• Develop, optimize, and remediate internal controls related to IT, security, operations, and engineering
• Work with external auditors to assist in the completion of annual compliance audits, such as SOC 2, ISO-27001 and FTC audits
• Ensures adequate and effective IT controls exist to meet applicable current and future security compliance requirements found in laws, regulations, frameworks such as requirements to align with SOC I & II, ISO 27001, NIST/FedRamp etc.
• Work with internal partners to complete internal audit requirements

• Bachelor’s degree in Management Information Systems (or other related field) and excellent academic credentials
• 1 - 2 years’ experience in a technology risk or compliance related role with one of more internal control frameworks: PCI, NIST 800-53, DoD STIGs, SSAE 18 (SOC), ISO 27001, MS-SDL)
• Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance related concepts to a broad range of technical and non-technical staff
• Demonstrated success working with internal audit, external auditors, outside consultants, and legal affairs
• Experience working in cloud-services environment (GCP, AWS etc)

• CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional) or other relevant certifications strongly preferred
• Experience in auditing infrastructure running Linux, CentOS and MySQL
• Knowledge of the SDLC, Agile Development, CIS Benchmark, and Google Cloud Platform or AWS Security Controls

Protecting the health of our employees and the candidates interested in a career at Credit Karma is our top priority. We appreciate your understanding and being open and flexible with any changes related to our interviewing process. Moving forward, all new hires are required to be fully vaccinated against COVID-19 and to share proof of that status prior to their first day of onboarding. If you are unable to be vaccinated for medical or religious reasons, we will explore potential reasonable accommodations; however, Credit Karma may not be able to grant such accommodations in all cases.

• Medical and Dental Coverage
• Retirement Plan
• Commuter Benefits
• Wellness perks
• Paid Time Off (Vacation, Sick, Baby Bonding, Cultural Observance, & More)
• Education Perks
• Paid Gift Week in December

Pay Transparency Notice: Credit Karma’s mission of championing financial progress for all starts from within. That’s why we implemented role-based compensation, which ensures people who are in the same role receive the same pay with variations for geographic location only. It’s all part of a more comprehensive DEI strategy that helps level the playing field. The base salary range for this role is $121,000 to $154,000, plus equity and benefits.