Senior IT Assurance & Compliance Analyst

Leidos Chief Information Office, reporting through the Digital Modernization sector, is seeking a Senior IT Assurance & Compliance Analyst to lead and support IT General Controls (ITGC) implementation efforts for new and evolving enterprise systems, including emerging AI-enabled technologies and platforms.

This role will serve as a trusted advisor to project teams, ensuring compliance requirements and effective control frameworks are embedded into system implementations, operational processes, and technology initiatives from design through deployment.

The ideal candidate will possess strong knowledge of Sarbanes-Oxley (SOX) compliance, ITGC frameworks, operational controls, and audit practices, along with the ability to operate independently, lead cross-functional efforts, and drive initiatives with minimal oversight. This individual should be proactive, solutions-oriented, and able to influence stakeholders across all levels of the organization. Building collaborative relationships across Corporate IT, Audit, and business teams is critical to success in this role.

This position is also expected to provide leadership and mentorship to less experienced staff, contribute to broader IT Compliance initiatives, and develop an enterprise-level understanding of how compliance, governance, audit, risk, and operational processes align across the organization. The ideal candidate is a proactive leader who demonstrates sound judgment, takes ownership of initiatives, and can independently drive complex compliance efforts to completion in a fast-paced environment.

Location: The position offers full time telework from any U.S. based location.

Citizenship: U.S. Citizenship is required.

Primary Responsibilities

• Lead and guide the implementation of IT General Controls (ITGCs) and operational controls for new system implementations, upgrades, major enhancements, and AI-enabled technologies.

• Partner with project teams to ensure SOX, IT compliance, and governance requirements are integrated throughout the system development lifecycle (SDLC).

• Advise stakeholders on control design considerations for emerging technologies, including AI systems, automation platforms, and cloud-based solutions.

• Conduct assessments of IT general controls related to policy, procedures, access management, change management, system operations, and SDLC processes.

• Review and analyze IT control evidence for completeness, accuracy, and compliance with audit requirements.

• Coordinate with IT teams to ensure required evidence and documentation are generated, retained, and available in a timely manner.

• Evaluate system implementations and process changes for control impacts, including identification of control gaps and mitigating controls.

• Communicate control deficiencies, risks, and remediation recommendations to management and stakeholders.

• Validate artifacts gathered as part of SDLC and change management processes, including testing evidence and approval documentation.

• Serve as a subject matter expert for IT controls, governance, and compliance initiatives across enterprise technology projects.

• Support internal and external audit engagements, including walkthroughs, testing support, evidence collection, and issue remediation activities.

• Assist in developing and enhancing IT compliance processes, standards, governance models, and documentation practices.

• Lead cross-functional compliance initiatives and help drive prioritization, accountability, and execution across stakeholders.

• Provide training, mentorship, and day-to-day guidance to less experienced team members, helping to strengthen overall team capability and consistency.

• Develop a broad understanding of the IT Compliance organization and how compliance activities integrate with audit, enterprise risk management, and operational governance functions.

• Support preparation of management-level reporting, compliance metrics, audit summaries, and presentations for leadership stakeholders.

• Identify opportunities for process improvement and help mature the IT Compliance program through scalable and sustainable practices.

• Develop and maintain strong working relationships with internal/external auditors and key business stakeholders.

• Prepare and deliver metrics, reporting, and audit outcomes to track progress toward IT compliance objectives and continuous improvement initiatives.

• Ability to identify issues, propose solutions, and proactively drive remediation efforts to closure.

• Drive initiatives independently while helping foster a culture of accountability, operational excellence, collaboration, and continuous improvement.

Basic Qualifications

• Bachelor’s degree from an accredited college in Information Technology, Information Systems, Accounting, or related discipline with 8+ years of relevant experience (or Master’s degree with 6+ years of experience).

• Experience leading or supporting end-to-end IT SOX compliance programs with strong emphasis on IT General Controls (ITGCs).

• Demonstrated experience integrating IT controls into new system implementations and enterprise technology projects.

• Direct experience with IT risk management, control design, and compliance frameworks.

• Experience with system development lifecycle (SDLC), change management, logical access controls, and IT operations processes.

• Ability to explain technical IT control concepts to non-technical audiences and executive stakeholders.

• Strong analytical, organizational, and problem-solving skills with demonstrated attention to detail.

• Proven ability to lead initiatives, mentor team members, influence stakeholders, and operate effectively with minimal direction.

• Ability to lead a group of people, provide direction and mentorship to less experienced staff, and drive initiatives forward with minimal oversight.

• Demonstrated ability to independently manage complex initiatives and drive work to completion with minimal supervision.

• Ability to think strategically and understand how individual compliance activities support broader organizational objectives.

• Strong business acumen with the ability to balance strategic thinking and operational execution.

• Excellent written and verbal communication skills.

• Ability to build strong relationships and collaborate across technical and business organizations.

• Self-starter with the ability to manage multiple priorities in a fast-paced environment.

• Team-oriented, collaborative, diplomatic, adaptable, and results-driven.

Preferred Qualifications

• Previous experience auditing Costpoint, Workday, Cognos, UKGPro or similar systems.

• Experience supporting annual IT SOX testing with internal and external auditors.

• Experience implementing controls for ERP, cloud, SaaS, AI-enabled, or enterprise-wide technology implementations.

• Familiarity with governance and risk considerations related to AI systems and emerging technologies.

• Experience auditing or assessing AI systems, automated decision-making platforms, or related governance controls.

• Familiarity with ISO standards and COSO/COBIT frameworks.

• Prior experience in IT audit within a large multinational organization or Big 4 accounting firm.

• Experience preparing management reporting, compliance dashboards, or executive-level presentations.

• Strong project management and process improvement skills.

• Professional certifications such as CISA, AAIA, CIA, CPA, CRISC, or similar preferred.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.