Risk & Compliance Analyst

Description

Develop and manage process and tools to perform risk and control assessments Drive an efficient self assessment process across all technology areas Develop and manage a vendor/third party risk and control assessment process, coordinating issue tracking and remediation with vendor management and DR teams Facilitate and support Internal and External Audit engagements and remediation activities at all levels of the IT organization, ensuring clarity, precision of language and agreement with all audit report components and recommendations. Manage and track open audit issues, coordinating with regulators, internal/external audit and issue owners Manage Acquire and evaluate SAS70 Type II audits as required from 3rd party service providers in order to assess external organizations control and compliance capabilities. Interface with Legal / Compliance and Enterprise Risk Departments to provide technology risk support as required. Support Technology Policy and Risk Assessment organization to conduct internal risk assessments, review policies and standards, and produce necessary metrics and reports as required. Act as a change agent to influence the STS and corporate compliance culture. Serve as proxy for the Policy and Risk Assessment Lead as required Bachelors Degree in Computer Science, Information Systems, or other related field; or equivalent work experience. Minimum of 5 years of professional experience in Information Technology Risk or related field. Factbased decision maker who is able to gain consensus and employ influence management skills across diverse groups Able to objectively assess IT systems and processes, and devise effective solutions to mitigate risk Selfmotivated, operates with a sense of urgency and strong attention to detail.