IT Risk & Compliance Analyst
Share
Job Location:
Monthly Salary:
Posted on:
3 hours ago
Vacancies:
1 Vacancy
Job Summary
Required Skills and Experience
-3 years of IT security IT audit or other controls experience
-Experience and knowledge with identifying control gaps drafting remediation plans ushering remediation action plans through completion
-Experience with SOX
-Assurance experience: Audit/IT compliance compliance assessments IT governance GRC tools
Nice to Have Skills and Experience
-CISA or CRISC Certifications
-Experience with PCI controls NIST Cyber Framework
-Experience with the following: SAP Service Now AuditBoard Splunk Tenable CyberArk risk assessments vulnerability assessments
Job Description
- Coordinate efforts to implement SOX controls for in-scope SOX systems and processes. This entails coordinating discussions between stakeholders validating evidence and driving completion of remediation efforts in a timely manner.
- Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements Sarbanes-Oxley (SOX) PCI contractual requirements.
- Collect and sample evidence to support demonstration of compliance. Escalates out of compliance items to senior management. Additionally analyst adheres to company confidentiality and security requirements.
- Administers IT Compliance Management Systems and Governance Risk and Compliance (GRC) tool(s). Participate in the implementation of technology-based tools (e.g. GRC) to support IT risk initiatives.
- Support collection review and approval of compliance evidence.
- Assist in information sharing activities with partner utilities including gathering of metrics and managing of surveys.
- Documents non-compliance issues provides recommendations and ushers remediation actions to ensure in their resolution.
- Monitors and reports on exceptions risks and exposures to IT senior management.
- Conducting fact-based assessments of new and existing systems and technologies Assessing the effectiveness of regulatory compliance controls. Providing subject matter expertise to help internal stakeholders manage risk and controls.
Education: MUST HAVE A BACHELORS DEGREE.
Key Skills
- ISO 27001
- Microsoft Access
- Risk Management
- Financial Services
- PCI
- Risk Analysis
- Analysis Skills
- COBIT
- NIST Standards
- SOX
- Information Security
- Data Analysis Skills
