IT Audit & Compliance Analyst

Marcus & Millichap is the nation’s leading brokerage firm specializing in real estate investments with offices nationwide. Marcus & Millichap offers owners and investors the nation's most comprehensive real estate research and analysis for all types of income-producing property.Marcus and Millichap is seeking a mid-level IT Audit & Compliance Analyst to join our IT organization at a publicly traded company. This role supports SOX compliance, SOC 2 reporting, and IT risk management, and works closely with Internal Audit, Finance, and Cybersecurity teams to ensure strong technology controls and regulatory compliance.This position is ideal for someone with a solid foundation in IT controls and audits who wants to deepen their experience across SOX, SOC 2, and cybersecurity governance.The base salary range for this role is $105,000 - $115,000 per year. This position is eligible for a discretionary performance‑based bonus. The exact bonus amount is not guaranteed and will vary based on individual performance, team results, and company performance. Actual pay will be determined by factors such as education, experience, and job-related skills relevant to the role. Marcus & Millichap is a multi-state employer and posted salary ranges are provided in good faith for compliance with all relevant pay-transparency regulations. These ranges may not reflect potential compensation for positions based in other states or regions.Key ResponsibilitiesSOX & IT ControlsPerform and support SOX IT General Controls (ITGC) testing, including:User access managementChange managementSystem operations and backupsAssist with walkthroughs, risk assessments, and control documentationTrack and support remediation of control deficienciesPartner with Internal Audit and external auditors during SOX auditsSOC 2 & Third-Party AssuranceSupport SOC 2 Type I and Type II readiness and ongoing complianceMaintain control narratives, evidence, and audit artifactsCoordinate with IT, Engineering, and Security teams to ensure controls are operating effectivelyAssist in responding to customer and vendor security questionnairesCybersecurity & Risk CollaborationWork with the Cybersecurity team on:Security policies and standardsRisk assessments and control alignment (NIST, ISO, etc.)Incident response and access reviews (governance perspective)Help bridge compliance requirements with security operationsDocumentation & Continuous ImprovementMaintain IT policies, procedures, and control documentationIdentify opportunities to improve control design, automation, and audit efficiencyStay current on regulatory and industry best practicesRequired Qualificatons3-6 years of experience in IT audit, IT compliance, or technology riskHands-on experience with SOX ITGCsExposure to SOC 1 and/or SOC 2 auditsUnderstanding of core IT processes (access, change, SDLC, infrastructure)Strong documentation and communication skillsPreferred QualficationsExperience in a public company environmentFamiliarity with cybersecurity frameworks (NIST, ISO 27001, CIS)Experience working with external auditors or Big 4 firmsCertifications or progress toward:CISA - RequiredCISMCRISCCISSP (a plus, not required)What We OfferExposure to SOX, SOC 2, and cybersecurity governanceCareer growth toward Senior IT Auditor, GRC Manager, or Cyber Risk rolesCross-functional work with IT, Security, Finance, and Audit teamsCompetitive compensation and benefitsWhy This Role Is Attractive (unspoken but real)Not “pure audit” — includes security and risk exposurePublic company experience (very marketable)Clear path into senior IT audit, GRC, or cyber riskBenefitsMarcus & Millichap offers a comprehensive benefits package designed to support employees’ health, well-being, and financial security. Eligible employees may have access to the following benefits, subject to the terms of applicable benefit plans: Health, dental, and vision insurance Paid time off and paid holidays 401(k) retirement plan with employer matching contributions Life and disability insurance Employee Assistance Program (EAP) and wellness resourcesBenefits eligibility, coverage, and employer contributions may vary based on position, employment status (full-time or part-time), location, and length of service. This summary is provided for informational purposes only and does not constitute a guarantee of benefits. Additional details will be provided during the hiring process or upon request.Founded in 1971, Marcus & Millichap (NYSE: MMI) is a leading commercial real estate brokerage firm focusing exclusively on investment sales, financing, research, and advisory services, with nearly 1,700 investment sales and financing professionals in 80+ offices throughout the United States and Canada.Our mission is to help our clients create and preserve wealth by providing the best real estate investment sales, financing, research, and advisory services available.Marcus & Millichap, Inc. is a leading national real estate services firm specializing in commercial real estate investment sales, financing services, research and advisory services. As of December 31, 2025, the Company had 1,808 investment sales and financing professionals in more than 80 offices who provide investment brokerage and financing services to sellers and buyers of commercial real estate. The Company also offers market research, consulting and advisory, and leasing services to its clients. Marcus & Millichap, Inc. closed 8,818 transactions in 2025, with a sales volume of $50.8 billion.Marcus & Millichap is an Equal Opportunity Employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic under federal, state, or local law.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.