IT Risk and Compliance Analyst
Samprasoft
Cross-Functional Governance, Risk, and Compliance Consultant
We are seeking a skilled and experienced cross-functional Governance, Risk, and Compliance consultant that can work with IT Compliance and IT Risk on assessments, testing, reporting, and risk analysis within the Information Security Program.
Key Responsibilities:
- Perform Risk Assessments to ensure proper design and associated risks (inherent and residual) for systems, environments, and domains analyzed.
- Ability or understanding to gather information to determine threat event frequencies, loss event frequencies, susceptibility, and impact.
- Ability to test the design and operating effectiveness of quarterly/re-occurring IT controls that support our regulatory assessment programs (SOX, NYDFS, etc.).
- Ability to determine proper design of processes and ineffective processes and key elements of an effective process design.
- Understanding of key control points and able to perform walkthroughs and/or review of evidence to determine operating effectiveness.
- Collaborate with cross-functional teams to identify emerging risks, assess their potential impact on the organization, and develop mitigation strategies.
- Ability to contribute towards creating reports for different audiences for IT and non-IT stakeholders (senior management, executive leadership, system owners, and relevant stakeholders) to facilitate decision-making and drive continuous improvement efforts.
Preferred Qualifications:
- Experience with conducting IT/Cybersecurity audits, risk assessments, privacy assessments.
- Familiarity with CMMI, FAIR, NIST CSF, ISO-27001, CSC 18, and Privacy regulations.
- Experience with providing remediation recommendations for issues/findings.
- Experience with GRC tools (such as Archer, ServiceNow, etc.) and project management tools (Jira).
- Ability to lead walkthroughs and assessments with minimal oversight.
- Highly effective communication skills for management and sr.
Vacancy posted more than 2 months ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to IT Risk and Compliance Analyst. Be the first to apply!
Related searches
- risk Urbandale, IA
- high risk Urbandale, IA
- IT infrastructure Urbandale, IA
- IT account executive Urbandale, IA
- entry level IT tech Urbandale, IA
- information technology remote Urbandale, IA
- IT network Urbandale, IA
- remote health information technology Urbandale, IA
- IT team lead Urbandale, IA
- IT associate Urbandale, IA
