IT Compliance Analyst at Owlet in Remote

The Role

We are looking for an IT Compliance Analyst to join Owlet's IT team and help execute our IT governance, risk, and compliance program. This is a hands-on role focused on doing the work: running control tests, gathering audit evidence, maintaining compliance documentation, and building the institutional knowledge that keeps Owlet audit-ready year-round. You will work under the direct guidance of the IT Director and alongside Internal Audit, Finance, and Legal as you grow into broader program ownership over time.

This is a strong fit for someone early in their GRC career who wants real SOX ITGC experience at a public company, without getting buried in a Big 4 engagement that keeps them three layers from the actual controls. You will see how the program runs from the inside and be given increasing ownership as you develop.

What You'll Do

SOX IT General Controls (ITGC)

• Execute and document ITGC control testing across Owlet's key systems and platforms.
• Collect, organize, and maintain control evidence in accordance with audit requirements.
• Track control deficiencies and remediation items to closure under IT Director oversight.
• Support SOX readiness activities and auditor walkthroughs, including preparing materials and responding to auditor requests.

Audit Support

• Coordinate evidence collection and auditor access for internal audit, external financial audit, and SOC report engagements.
• Maintain the audit evidence repository and ensure documentation is current, organized, and audit-ready throughout the year.
• Serve as a reliable point of contact for auditor information requests, escalating to the IT Director as needed.

Policy and Documentation

• Maintain Owlet's IT policy library: version control, review tracking, and attestation coordination.
• Support annual policy review cycles by flagging outdated content and drafting proposed updates for IT Director review and approval.
• Assist with communicating policy updates and awareness initiatives across the organization.

Compliance Risk and Controls

• Maintain the IT compliance risk register: keeping entries current, tracking status, and flagging items that need IT Director attention.
• Support IT change management processes to preserve audit trail integrity and separation of duties controls.
• Assist with the IT component of third-party vendor compliance documentation as directed.