Senior IT Compliance Analyst
Posted Aug 11, 2026 · We last checked this listing on Oct 5, 2026
Likely interview questions for this role
Written from this job description, not a generic list. Each one notes what the interviewer is really checking.
About your past
Tell me about a time you had to convince a technology team to change how they operated to meet a compliance requirement.
What they are checking: Whether they can influence engineers through clear reasoning rather than relying on audit authority alone.
Describe how you've prepared evidence for an external audit.
What they are checking: Whether they organize audits so evidence is complete and ready, reducing findings and disruption.
What would you do
You find a control gap in a legacy system that can't be fixed quickly. What do you do?
What they are checking: Whether they can propose compensating controls and document risk honestly instead of hiding the gap.
How would you assess compliance risk for a new cloud or AI tool a business team wants to adopt?
What they are checking: Whether they can evaluate emerging technology quickly and give a practical answer instead of a reflexive no.
About the work
Walk me through how you'd test an IT general control for SOX, such as user access reviews.
What they are checking: Whether they know how to design, test and document controls so they hold up when external auditors look.
How do HIPAA Security Rule requirements show up in the controls you'd expect to see in an IT environment?
What they are checking: Whether they can translate regulation into specific, testable controls rather than reciting the rule.
What do the SEC cybersecurity disclosure rules require, and how does compliance support them?
What they are checking: Whether they understand newer SEC obligations around incident materiality and risk management reporting.
How do you keep a policy library current as technology and regulations change?
What they are checking: Whether they run policy management as an ongoing process with owners and review cycles, not one-time writing.
How do you decide which control weaknesses to report to leadership first?
What they are checking: Whether they prioritize findings by real risk and impact rather than by how easy they are to fix.
How does resiliency, like backup and disaster recovery, fit into your view of compliance?
What they are checking: Whether they see compliance broadly enough to include availability, which the posting names alongside privacy.
Practice this interview out loud.
Offer builds a real interview for this exact role at Vizient from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.
Practice this out loudThe full job description
As published by Vizient.