Job Description
Required Skills and Experience
-3+ years of IT security, IT audit or other controls experience
-Experience and knowledge with identifying control gaps, drafting remediation plans, ushering remediation action plans through completion
-Experience with SOX
-Assurance experience: Audit/IT compliance, compliance assessments, IT governance, GRC tools
Nice to Have Skills and Experience
-CISA or CRISC Certifications
-Experience with PCI controls, NIST Cyber Framework
-Experience with the following: SAP, Service Now, AuditBoard, Splunk, Tenable, CyberArk, risk assessments, vulnerability assessments
Job Description
- Coordinate efforts to implement SOX controls for in-scope SOX systems and processes. This entails coordinating discussions between stakeholders, validating evidence and driving completion of remediation efforts in a timely manner.
- Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements, Sarbanes-Oxley (SOX), PCI, contractual requirements.
- Collect and sample evidence to support demonstration of compliance. Escalates out of compliance items to senior management. Additionally, analyst adheres to company confidentiality and security requirements.
- Administers IT Compliance Management Systems and Governance, Risk, and Compliance (GRC) tool(s). Participate in the implementation of technology-based tools (e.g. GRC) to support IT risk initiatives.
- Support collection, review and approval of compliance evidence.
- Assist in information sharing activities with partner utilities including gathering of metrics and managing of surveys.
- Documents non-compliance issues, provides recommendations and ushers remediation actions to ensure in their resolution.
- Monitors and reports on exceptions, risks and exposures to IT senior management.
- Conducting fact-based assessments of new and existing systems and technologies, Assessing the effectiveness of regulatory compliance controls. Providing subject matter expertise to help internal stakeholders manage risk and controls.
Education: MUST HAVE A BACHELORS DEGREE.
Job Tags