What are the responsibilities and job description for the Risk Analyst position at Integrated Resources, Inc ( IRI )?
Required Skills and
Experience
-3 years of IT security, IT
audit or other controls experience
-Experience and knowledge with identifying control gaps, drafting remediation
plans, ushering remediation action plans through completion
-Experience with SOX
-Assurance experience: Audit/IT compliance, compliance assessments, IT
governance, GRC tools
Nice to Have Skills and
Experience
-CISA or CRISC Certifications
-Experience with PCI
controls, NIST Cyber Framework
-Experience with the following: SAP, Service Now, AuditBoard, Splunk, Tenable,
CyberArk, risk assessments, vulnerability assessments
Job Description
- Coordinate
efforts to implement SOX controls for in-Product SOX systems and processes.
This entails coordinating discussions between stakeholders, validating
evidence and driving completion of remediation efforts in a timely manner.
- Ensures
that quality methods and procedures are executed by the IT department to
stay in compliance with regulatory requirements, Sarbanes-Oxley (SOX),
PCI, contractual requirements.
- Collect
and sample evidence to support demonstration of compliance. Escalates out
of compliance items to senior management. Additionally, analyst adheres to
company confidentiality and security requirements.
Administers IT Compliance Management Systems and
Governance, Risk, and Compliance (GRC) tool(s). Participate in the
implementation of technology-based tools (e.g. GRC) to support IT risk
initiatives.
- Support
collection, review and approval of compliance evidence.
- Assist
in information sharing activities with partner utilities including
gathering of metrics and managing of surveys.
- Documents
non-compliance issues, provides recommendations and ushers remediation
actions to ensure in their resolution.
- Monitors
and reports on exceptions, risks and exposures to IT senior management.
- Conducting
fact-based assessments of new and existing systems and technologies,
Assessing the effectiveness of regulatory compliance controls. Providing
subject matter expertise to help internal stakeholders manage risk and
controls.
Education: MUST HAVE A BACHELORS DEGREE.