IT Compliance & Automation Analyst

Ibotta is seeking an IT Compliance & Automation Analyst to join our innovative team and contribute to our mission to Make Every Purchase Rewarding. You will help strengthen and modernize Ibotta's IT compliance program. This role will support compliance across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, while identifying opportunities to automate manual processes and build more efficient, scalable compliance workflows. The ideal candidate brings demonstrated IT compliance experience in a public company environment along with a passion for using automation and emerging AI technologies to improve how compliance work gets done.

This position is located in Denver, Colorado as a hybrid position requiring 3 days in office (Tuesday, Wednesday, and Thursday). Candidates must live in the United States.

Not based in Denver? We will offer a relocation bonus to help make your move to the Mile High City a smooth one.

• Partner with IT and business teams to develop, maintain, and continuously improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001, providing guidance on compliance requirements and best practices

• Lead IT control testing and audit coordination across compliance frameworks, partnering with internal audit, external auditors, and third-party assessors

• Conduct risk assessments, identify control gaps and compliance issues, and partner with process and control owners to drive remediation

• Identify manual, time-intensive compliance processes — including access reviews, evidence collection, and control monitoring — and redesign them using scripting, workflow tools, and AI-assisted technologies

• Build and maintain a roadmap of compliance automation initiatives, measuring efficiency gains and reporting progress to management

• Continuously improve audit evidence collection and PBC processes to reduce administrative burden while maintaining audit quality

• Develop a solid understanding of Ibotta's IT infrastructure, applications, and systems to proactively identify risks and opportunities for improvement

• Stay current on evolving regulatory requirements and emerging automation/AI technologies, and provide guidance and training to relevant stakeholders

• Embrace and uphold Ibotta's Core Values: Integrity, Boldness, Ownership, Teamwork, Transparency, & A good idea can come from anywhere

• 4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC

• Bachelor's degree in IT, Information Systems, or a related field, or equivalent practical experience required

• Working knowledge of SOC 1, SOC 2, and ISO 27001, including how these frameworks overlap with and differ from SOX requirements

• Proficient in technical auditing and experience translating controls and compliance requirements for technical stakeholders

• Demonstrated experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies

• Curiosity and sound judgment around applying AI to compliance workflows while maintaining appropriate standards for audit-quality work

• Experience documenting internal control processes through narratives, flowcharts, or similar documentation

• Effective analytical, problem-solving, communication, and collaboration skills, with the ability to work independently and manage competing priorities

• Knowledge of IT systems and cloud environments such as AWS

• CISA or similar professional certification preferred; SOC 2 or ISO 27001 certifications/coursework are a plus

About Ibotta ("I bought a...")

Ibotta (NYSE: IBTA) is a leading performance marketing platform allowing brands to deliver digital promotions to over 200 million consumers through a network of publishers called the Ibotta Performance Network (IPN). The IPN allows marketers to influence what people buy, and where and how often they shop – all while paying only when their campaigns directly result in a sale. American shoppers have earned over $2.6 billion through the IPN since 2012. The largest tech IPO in history to come out of Colorado, Ibotta is headquartered in Denver, and is continually listed as a top place to work by The Denver Post and Inc. Magazine.

To learn more about what our Tech teams are doing day to day, visit Building Ibotta on Medium.com

Additional Details:

• This position is located in Denver, CO and includes competitive pay, flexible time off, benefits package (including medical, dental, vision), Employee Stock Purchase Program, and 401k match. Denver office perks include paid parking, snacks, and occasional meals.

• Base compensation range: $110,000 - $125,000. Equity is included in overall compensation package. This compensation range is specific to the United States labor market and may be adjusted based on actual experience.

• Ibotta is an Equal Opportunity Employer. Ibotta’s employment decisions are made without regard of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected status.

• Applicants must be currently authorized to work in the United States on a full-time basis.

• Applicants are accepted until the position is filled.

• For the security of our employees and the business, all employees are responsible for the secure handling of data in accordance with our security policies, identifying and reporting phishing attempts, as well as reporting security incidents to the proper channels.

Recruiting Agency Notice
Ibotta does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to any Ibotta employees.