Back to search
CNA is looking for an experienced IT Technology Auditor to help strengthen and mature our technology risk, security, and compliance programs. This role will help ensure CNA’s technology environment aligns with internal policies, regulatory requirements, industry standards, and audit expectations. The role will partner with IT, Security, Finance, Operations, and other business teams to assess controls, gather evidence, identify gaps, support remediation, and promote a risk-based compliance culture.
Why This Role Matters
Technology compliance is critical to CNA National’s ability to operate securely, serve our customers, and continue advancing our security and risk programs. The IT Compliance Analyst will play a key role in reducing compliance risk, improving audit preparedness, and helping teams translate complex regulatory and security expectations into clear, practical actions.
Schedule and LocationÂ
Role is based in Scottsdale, Arizona, working a hybrid schedule of four days in the office and one day remote.
What You’ll Do
- Support IT compliance activities, including control testing, evidence collection, documentation, and remediation tracking.
- Assist with internal and external audits by gathering, reviewing, and organizing required documentation
- Evaluate the design and effectiveness of IT controls and identify potential gaps, inconsistencies, or areas of risk.
- Partner with technical teams to understand systems, processes, access controls, logging, monitoring, data protection, and security practices.
- Help maintain and update IT compliance policies, procedures, control narratives, and related documentation.
- Support SOX, PCI DSS, NIST, SOC 2, ISO 27001, CIS Controls, and other applicable compliance frameworks as needed.
- Track remediation plans and follow up with stakeholders to ensure timely resolution of compliance findings.
- Translate compliance requirements into clear, practical guidance for business and technical audiences.
- Maintain confidentiality and handle sensitive information with integrity and discretion.
What You’ll Bring
- Bachelor’s degree in Information Technology, Cybersecurity, Business, Accounting, Risk Management, or a related field; equivalent experience may be considered.
- Experience in IT compliance, audit, cybersecurity, risk management, internal controls, or a related discipline.
- Working knowledge of IT general controls, access management, change management, data protection, vulnerability management, and security monitoring.
- Familiarity with compliance frameworks such as SOX, PCI DSS, NIST, ISO 27001, SOC 2, or CIS Controls.
- Strong analytical, documentation, and organizational skills with the ability to manage multiple priorities and deadlines.
- Ability to communicate clearly with both technical and non-technical stakeholders.
- High level of integrity, professional judgment, and attention to detail.
What Makes You Successful
- Detail-orientation and thoroughnessÂ
- Thinking critically, asking thoughtful questions, and connecting compliance requirements to business risk
- Communicating with clarity and confidence, helping stakeholders understand what is required and why it matters
- Organized, dependable, and able to keep audit and remediation activities on track
- Influences without authority by building trust, gaining cooperation, and following through professionally
- Stays curious and current on evolving cybersecurity risks, technologies, regulations, and industry best practices
Why Join CNA
At CNA, your work makes a meaningful impact. We are a respected leader in automotive protection products with a strong history, award-winning service, and a continued focus on investing in our people and technology. You’ll join a collaborative team environment where integrity, accountability, innovation, and customer focus guide how we serve our clients and support one another.
If you are passionate about compliance, security, risk management, and building practical solutions that help an organization operate with confidence, we encourage you to apply.
Learn more about this Employer on their Career Site
