IT Risk Analyst II

The IT Risk Analyst II is responsible for collaborating with IT and Business personnel to ensure compliance with Information Security and GRC objectives, establishing guidelines and standards, and implementing controls to mitigate risk. The ideal candidate will have prior experience with GRC or audit programs and demonstrated capabilities to collaborate with stakeholders across IT and the business.

Requirements

• Provide support across the IT organization in effectively and efficiently meeting our SOX and regulatory compliance requirements
• Support development, enforcement, and continuous improvement of IT policies and standards, ensuring alignment with risk, security, and compliance requirements
• Track and manage compliance exceptions, issues, and remediation plans to closure, including risk acceptance documentation when required
• Partner with internal and external auditors to validate controls for compliance
• Uphold policy and rigor in the third party risk assessment process used by all business units
• Conduct compliance assessments for IT projects, evaluating impacts related to security, privacy, and control requirements

Benefits

• Competitive compensation and benefits programs
• Market-based base pay
• Annual pay-for-performance incentive plan
• Strong benefits package