Jr. IT Risk & Compliance Analyst

Are you passionate about understanding the “why” in managing risk and bridging the gap between business and technology? If so, come join the growing IT Risk & Compliance (ITRC) team at Elastic! In this role, you will gain hands-on experience working across IT, Information Security, and other business functions to support risk and compliance initiatives in a fast-paced, global environment.

We’re seeking a self-motivated, early career professional (recent graduate or someone with 0–1 year of experience) who is eager to learn, curious about risk management, and interested in both the business and technical sides of IT risk. The right candidate will bring strong critical thinking skills, grit, and resilience to solving complex problems, while demonstrating an eagerness to grow their career in risk and compliance.

What You Will Be Doing

Assist in evaluating technology risks for end-to-end processes and new projects at Elastic, from planning and scope development to execution.

Help document and assess business system architecture and processes to support effective IT risk management and mitigation strategies.

Support the validation of process and control designs for internal and external audits (including IT General Controls).

Participate in internal controls walkthroughs and help gather evidence requested by audit teams.

Analyze audit findings or improvement opportunities and assist in defining remediation plans.

Partner with colleagues across IT, Security, and business functions to educate and promote a “compliance by design” mindset.

What You Bring

Bachelor’s degree in Management Information Systems (MIS), Business + Technology, or a related field (or equivalent internship/project experience).

0–1 years of experience (internship, Big 4, consulting, or relevant coursework in IT risk, compliance, or audit is a plus).

Basic understanding of IT General Controls (ITGCs) and their importance in a control environment.

Interest in IT risk management, compliance, or audit — with less focus on cyber/engineering and more on business + technical application.

Strong analytical, critical thinking, and creative problem-solving abilities.

Grit, resilience, and adaptability when approaching new challenges.

Strong communication and collaboration skills, with the ability to work across diverse teams.

Natural curiosity and eagerness to learn, with a mindset of continuous improvement.