Sr. Technology Risk & Compliance Analyst

Remote Position

The Senior Risk & Compliance Analyst role within the Clients IT department is responsible for helping establish and maintain a comprehensive risk and compliance strategy for tech environment. The position is vital to the ongoing management of the audit processes and risk mitigation efforts designed to ensure accurate reporting and communication of Clients risk and compliance posture.

Responsibilities:

Risk Management:

• Assist in the identification of potential risks and treatment
• Establish and maintain open communication channels with stakeholders
• Become proficient in the operations of the ServiceNow IRM module
• Organize and execute annual risk control self-assessments
• Lead the effort in maintaining an accurate and comprehensive risk register
• Provide input and guidance to teams on risk mitigation

Compliance Management:

• Lead internal audit processes for control validation
• Assist with achieving and maintaining compliance with industry/business requirements
• Create, update, and maintain Tech’s policies, procedures, and standards
• Assist in identification of appropriate IT General Controls (ITGC)
• Help develop and validate control metrics

Qualifications:

The Senior Risk & Compliance Analyst should have strong organizational, communication and conflict management skills as well as the following:

• Experience with GRC tools such as ServiceNow, OneTrust, Lockpath, etc. is beneficial
• Knowledge of and experience working with common control frameworks (NIST, SOC2, SOX, etc.)
• A Bachelor’s degree or equivalent education and relevant work experience
• Strong communication skills and the ability engage with key stakeholders across functional teams
• Excellent analytical and problem-solving skills with strong attention to detail
• Solid understanding of technology environments including common infrastructures and tools
• Good grasp of information security industry standards and related best business practices
• Time management skills and the ability to prioritize workload, experience in agile/scrum environment
• Four to six years of experience in the field of technology compliance or audit
• Industry certifications specifically related to Information Security

Powered by JazzHR

NikV93rn7F