IT Risk and Compliance Analyst

Job Description – add details here

Job Description:

The Senior IT Risk and Compliance Analyst will aid in supporting the Information Technology department’s adherence to the Bank’s Governance, Risk & Compliance (GRC) framework, Enterprise Risk Management framework, and Sarbanes-Oxley (Sox) compliance.
Responsibilities will include but are not limited to:

• Collaborating with IT personnel to understand operational processes and provide recommendations for improvement.
• Identifying technology risk and aiding with developing appropriate controls and validation of controls.
• Ensuring alignment of technology controls and processes with industry frameworks.
• Assist with implementing continuous monitoring of IT controls and working with data for efficient control testing.
• Perform various, as necessary related to daily monitoring, issue remediation support, external audit support, etc.
• Ability to create dashboards and reporting, as necessary.

Qualifications and Education Requirements

• Bachelor’s degree
• Minimum 4 years of IT audit or IT risk management experience.
• Industry certification in Information Technology or Risk Management.
• Demonstrated capability to perform, risk assessments, and ITGC testing.
• Knowledge of Internal Control frameworks (COSO) and Information Technology frameworks (COBIT, NIST, ISO, and ITIL.)

Preferred Skills

• Data analysis and automation skills.
• Experience in assessing and testing IT areas such as Security, Architecture, and IT Operations.
• Ability to demonstrate creativity and innovation to provide fresh ideas and approaches to process improvements and control testing.
• Ability to manage ambiguity and changing priorities.
• Effective communication skills and ability to influence.
• Use of Tableau, UI Path, or other tools used for automation.