SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 110,000 - 125,000 / annual
Ibotta, a publicly traded performance marketing platform (NYSE: IBTA) headquartered in Denver, is seeking an IT Compliance & Automation Analyst to strengthen and modernize its IT compliance program. The role supports compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001 frameworks while identifying opportunities to automate manual compliance processes.
Key responsibilities include:
- Partner with IT and business teams to develop, maintain, and improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, providing guidance on compliance requirements and best practices
- Lead IT control testing and audit coordination across compliance frameworks, working with internal audit, external auditors, and third-party assessors
- Conduct risk assessments, identify control gaps and compliance issues, and drive remediation with process owners
- Identify manual, time-intensive compliance processes (access reviews, evidence collection, control monitoring) and redesign them using scripting, workflow tools, and AI-assisted technologies
- Build and maintain a roadmap of compliance automation initiatives, measuring efficiency gains and reporting progress to management
- Improve audit evidence collection and PBC processes to reduce administrative burden while maintaining audit quality
- Develop understanding of Ibotta's IT infrastructure, applications, and systems to proactively identify risks and improvement opportunities
- Stay current on evolving regulatory requirements and emerging automation/AI technologies; provide guidance and training to stakeholders
The position is hybrid, requiring 3 days in office (Tuesday, Wednesday, Thursday) in Denver. Relocation assistance is available for candidates outside the Denver area.
REQUIREMENTS:
- 4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC
- Bachelor's degree in IT, Information Systems, or related field, or equivalent practical experience
- Working knowledge of SOC 1, SOC 2, and ISO 27001, including how these frameworks overlap with and differ from SOX requirements
- Proficient in technical auditing and experience translating controls and compliance requirements for technical stakeholders
- Demonstrated experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies
- Curiosity and sound judgment around applying AI to compliance workflows while maintaining appropriate standards for audit-quality work
- Experience documenting internal control processes through narratives, flowcharts, or similar documentation
- Effective analytical, problem-solving, communication, and collaboration skills; ability to work independently and manage competing priorities
- Knowledge of IT systems and cloud environments such as AWS
- CISA or similar professional certification preferred; SOC 2 or ISO 27001 certifications/coursework are a plus
