Job Description

Required Skills and Experience

-3+ years of IT security, IT audit or other controls experience
-Experience and knowledge with identifying control gaps, drafting remediation plans, ushering remediation action plans through completion

-Experience with SOX
-Assurance experience: Audit/IT compliance, compliance assessments, IT governance, GRC tools

Nice to Have Skills and Experience

-CISA or CRISC Certifications

-Experience with PCI controls, NIST Cyber Framework
-Experience with the following: SAP, Service Now, AuditBoard, Splunk, Tenable, CyberArk, risk assessments, vulnerability assessments

Job Description

• Coordinate efforts to implement SOX controls for in-scope SOX systems and processes. This entails coordinating discussions between stakeholders, validating evidence and driving completion of remediation efforts in a timely manner.

• Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements, Sarbanes-Oxley (SOX), PCI, contractual requirements.

• Collect and sample evidence to support demonstration of compliance. Escalates out of compliance items to senior management. Additionally, analyst adheres to company confidentiality and security requirements.

• Administers IT Compliance Management Systems and Governance, Risk, and Compliance (GRC) tool(s). Participate in the implementation of technology-based tools (e.g. GRC) to support IT risk initiatives.
• Support collection, review and approval of compliance evidence.

• Assist in information sharing activities with partner utilities including gathering of metrics and managing of surveys.

• Documents non-compliance issues, provides recommendations and ushers remediation actions to ensure in their resolution.

• Monitors and reports on exceptions, risks and exposures to IT senior management.

• Conducting fact-based assessments of new and existing systems and technologies, Assessing the effectiveness of regulatory compliance controls. Providing subject matter expertise to help internal stakeholders manage risk and controls.

Education: MUST HAVE A BACHELORS DEGREE.

Job Tags

Similar Jobs