layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Senior Analyst, IT Risk & GRC at Viasat | LAYIQ

The IT Risk Senior Analyst is a strategic advisor responsible for integrating IT risk management and compliance into enterprise technology transformation initiatives. This role ensures that systems and processes are designed with robust controls to meet SOX and other regulatory requirements while enabling business innovation. Acting as a main liaison between IT, Finance, and Audit, the role delivers executive-level insights on compliance posture and guides teams in building sustainable, audit-ready environments.
The ideal candidate possesses a strong blend of technical IT auditing skills, experience with Governance, Risk, and Compliance (GRC) frameworks, and a proactive attitude focused on improving documentation quality and streamlining control walkthroughs.
Reporting to the Global IT SOX Risk Management Leader, you’ll drive strategic SOX readiness projects and provide risk advisory expertise across many process areas to ensure compliance with SOX while enabling process excellence. You’ll play a key role in strengthening the control environment and maintaining our company’s financial integrity.
This is a site‑based role, employees work 3+ days (60%+) per week from a Viasat office or work location within a standard five‑day workweek.
The day-to-day
Reporting & Stakeholder Engagement
Prepare periodic and ad-hoc updates on IT risk, compliance status, and transformation initiatives for senior leadership.
Lead regular governance meetings with Global IT (GIT), Finance, Internal Audit (IA), and External Audit to drive alignment.
IT Compliance & Risk Management
Lead the execution of IT SOX compliance activities, including scoping, risk assessment, and testing of ITGCs across change management, logical access, and computer operations.
Develop and maintain a forward-looking compliance roadmap, aligning priorities and timelines with business leadership.
Assist in maintaining and maturing the IT Controls framework, aligning corporate controls with industry standards (COBIT, NIST, ISO) and organizational risk appetite.
Actively monitor the progress of open remediation milestones, providing regular status updates to management, and perform independent validation testing to ensure deficiencies are effectively resolved before formal testing.
Serve as the main point of contact for external auditors and internal customers to facilitate evidence collection, resolve testing exceptions, and clarify management determinations.
Control Design & Implementation
Advise on and ensure the integration of ITGCs and automated application controls into major system implementations, upgrades, and enhancements.
Support control design, documentation, and validation throughout the System Development Life Cycle (SDLC), ensuring controls are operating effectively before systems transition to production.
Architect and document high-quality control walkthroughs. Proactively identify gaps and historical documentation issues to ensure a smooth, repeatable, and optimized annual audit cycle.
Multi-functional Collaboration & Advisory
Partner with multi-functional leaders in IT, Engineering, and Finance to embed practical risk management practices into system designs without hindering delivery speed.
Coordinate closely with Internal Audit to ensure business readiness and alignment on audit expectations during significant system changes.

Responsibilities

Reporting & Stakeholder Engagement
Prepare periodic and ad-hoc updates on IT risk, compliance status, and transformation initiatives for senior leadership.
Lead regular governance meetings with Global IT (GIT), Finance, Internal Audit (IA), and External Audit to drive alignment.
IT Compliance & Risk Management
Lead the execution of IT SOX compliance activities, including scoping, risk assessment, and testing of ITGCs across change management, logical access, and computer operations.
Develop and maintain a forward-looking compliance roadmap, aligning priorities and timelines with business leadership.
Assist in maintaining and maturing the IT Controls framework, aligning corporate controls with industry standards (COBIT, NIST, ISO) and organizational risk appetite.
Actively monitor the progress of open remediation milestones, providing regular status updates to management, and perform independent validation testing to ensure deficiencies are effectively resolved before formal testing.
Serve as the main point of contact for external auditors and internal customers to facilitate evidence collection, resolve testing exceptions, and clarify management determinations.
Control Design & Implementation
Advise on and ensure the integration of ITGCs and automated application controls into major system implementations, upgrades, and enhancements.
Support control design, documentation, and validation throughout the System Development Life Cycle (SDLC), ensuring controls are operating effectively before systems transition to production.
Architect and document high-quality control walkthroughs. Proactively identify gaps and historical documentation issues to ensure a smooth, repeatable, and optimized annual audit cycle.
Multi-functional Collaboration & Advisory
Partner with multi-functional leaders in IT, Engineering, and Finance to embed practical risk management practices into system designs without hindering delivery speed.
Coordinate closely with Internal Audit to ensure business readiness and alignment on audit expectations during significant system changes.

Qualifications

5+ years of experience in IT Audit, IT Compliance, or IT Risk Management.
Experience within a Big 4 firm or a large public enterprise is highly preferred.
Bachelor’s degree or equivalent experience in Management Information Systems (MIS), Accounting Information Systems, Computer Science, Finance, or a related field.
Strong expertise in SOX frameworks, ITGCs, automated application controls, and report testing (IUC/IPE).
Proven experience designing, implementing, or testing IT controls within complex IT environments (applications, databases, infrastructure) during system implementations.
Superb communication and customer management skills, with a demonstrable ability to translate complex, technical
IT risks into actionable insights for non-technical financial executives.
An analytical attitude dedicated to assessing risk and recommending practical, sustainable remediation solutions.
Professional designations such as CISA (strongly preferred), CRISC, CISSP, or a CPA (with a technology focus).
U.S. citizenship is required.

Senior Analyst, IT Risk & GRC

Employer job description

About us

What you'll do

What you'll need

What will help you on the job

Salary range

Responsibilities

Qualifications

Equal opportunity and accommodations

About this listing