Associate Analyst IT Compliance

Live the experience . From professional empowerment to continual learning opportunities. From ongoing investment in new and emerging technologies to a career of self-determination. At Ulta Beauty, our tech team is critical to our scalability—and is recognized that way. We’ve been defined as a “mature start-up.” A place where interdepartmental exposure, open doors, and genuine collaboration is ubiquitous. Where challenges come fast and furious, requiring agility, mental dexterity, and creativity. Where our passion for better solutions drives us and is core to who we are.   We’re engineering for the future of retail, and it’s no-holds-barred. But for those motivated by continual change and ambiguity, by superior leadership, by whip smart colleagues who will press you daily for your very best, you’ll find that virtually nothing’s impossible at Ulta Beauty. THE IMPACT YOU CAN HAVE:  The Associate Analyst, IT Compliance supports the organization's cybersecurity governance, risk management, and compliance programs in a dynamic and fast-paced environment. This role works closely with Information Security, IT, Internal Audit, business stakeholders, and control owners to help maintain compliance with regulatory, industry, and corporate requirements including Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), and third-party risk management activities.   The Associate Analyst assists with the execution of compliance assessments, risk reviews, control monitoring, policy management, and audit support activities. The position develops a foundational understanding of information security frameworks, risk management practices, and regulatory requirements while contributing to the organization's overall cybersecurity and compliance objectives.   YOU'LL ACCOMPLISH THESE GOALS BY:    • Compliance Program Support Assists in the execution and maintenance of IT compliance programs, including SOX, PCI DSS, and other applicable regulatory, industry, and corporate requirements. Supports collection, organization, and validation of compliance evidence and documentation.   • Risk Management Assists with the identification, documentation, and tracking of cybersecurity and technology risks. Supports risk assessment activities and helps maintain risk registers, remediation plans, and related reporting.   • Audit & Assessment Support Supports internal and external audits by gathering requested documentation, coordinating evidence collection activities, tracking requests, and assisting with remediation follow-up activities.   • Policy & Standards Management Supports the maintenance, review, and communication of information security policies, standards, procedures, and guidelines. Assists in ensuring documentation remains current and aligned with organizational and regulatory requirements.   • Third-Party Risk Management Participates in vendor and third-party risk assessment processes by collecting information, reviewing submitted documentation, tracking assessment activities, and escalating identified concerns as appropriate.   • Control Monitoring & Validation Assists with monitoring the effectiveness of IT and cybersecurity controls. Reviews evidence submitted by control owners and supports control testing activities to validate compliance requirements.   • Data Analysis & Reporting Collects, analyzes, and interprets governance, risk, and compliance data. Assists with preparing reports, dashboards, metrics, and presentations that communicate compliance status, risk trends, and remediation activities.   • Relationship Management Develops working relationships with business and technology teams to support compliance initiatives, facilitate information gathering, and promote awareness of governance, risk, and compliance requirements.   • Continuous Improvement Identifies opportunities to improve governance, risk, compliance, and audit processes. Supports implementation of