IT Risk & Compliance Analyst

We’re Watts. Together, we’re reimagining the future of water. We feel proud every day about what we do. We're all part of the same crucial mission, no matter what function we support -- it's to provide safe, clean water for the world, and to protect our planet's most valuable resource.

What we do

For 150 years, Watts has built best-in-class products that are trusted by customers in residential and commercial settings across the world. We are at the forefront of innovation, working with cutting-edge technology to provide smart and connected, sustainable water solutions for the future. Watts is a leading brand with a quality reputation — and we have a dynamic future ahead.

Scope of Position

The IT Risk & Compliance Analyst, as part of the Information Security organization, is responsible for supporting the execution of Watts' IT compliance, audit readiness, cybersecurity findings management, and risk management activities. This role coordinates audit and compliance efforts across Information Security, IT, Internal Audit, business stakeholders, and external assessors while supporting SOX IT General Controls (ITGCs), cybersecurity compliance obligations, and continuous process improvement initiatives.

This position reports to the Manager, IT Risk & Compliance. This role is remote and may be based anywhere within the United States.

Primary

Job Duties and Responsibilities

• Coordinate IT compliance, audit-related activities, and cybersecurity findings management efforts across Information Security, IT, Internal Audit, business control owners, and external assessors.
• Support SOX IT General Controls (ITGC) activities, including planning, evidence collection, documentation review, auditor inquiries, testing support, and issue resolution.
• Administer and maintain compliance, audit, findings, and risk management information within Optro (Audit Board) and other systems of record.
• Track audit findings, remediation plans, risk items, action plans, and stakeholder commitments to ensure timely completion and closure.
• Support internal and external audits, assessments, walkthroughs, control testing activities, and evidence requests.
• Assist with compliance and risk management activities related to cybersecurity disclosures, privacy requirements, data protection regulations, and external security assessments.
• Partner with control owners, process owners, and risk owners to clarify compliance requirements, facilitate evidence collection, and support remediation activities.
• Monitor timelines, milestones, dependencies, and deliverables across multiple concurrent compliance and audit work streams.
• Prepare organized documentation, status reports, metrics, dashboards, and management reporting materials to support decision-making and audit readiness.
• Maintain accurate records of controls, risks, findings, remediation activities, and supporting evidence.
• Assist in mapping controls, risks, findings, and supporting documentation to the NIST Cybersecurity Framework and other applicable regulatory frameworks.
• Identify opportunities to improve compliance processes through workflow enhancements, reporting automation, evidence reuse, standardization, and other process improvements.
• Support the development of compliance documentation, procedural guidance, stakeholder communications, and training materials as needed.
• Collaborate with cross-functional teams to promote compliance awareness, accountability, and continuous improvement across the organization.
• Maintain confidentiality and exercise discretion when handling sensitive compliance, audit, risk, and cybersecurity information.
• Assume responsibility for other projects and duties as assigned by the Manager, IT Risk & Compliance or Company management.

Travel Requirements