What are the responsibilities and job description for the IT Risk & Compliance Analyst position at Advanced Tech Placement?
The position is responsible for working with IT colleagues to ensure IT controls remain in compliance. To do so, this position is responsible for understanding IT controls, helping to identify and mitigate controls gaps, tracking open audit requests, coordinating responses from the IT team, and ensuring efficient interaction between IT and the Internal Audit (IA) team. In addition, this position will advise IT colleagues on matters of risk and work with IT colleagues to identify and implement controls improvement opportunities.
**Responsibilities: **
- Serve as the primary contact for IT colleagues accountable for specific IT controls (control owners) and specific systems that must comply with the controls (system owners).
- Work closely with IT control and system owners and Risk Management leader to identify and mitigate risks, coordinate and respond to audit requests, and identify, recommend, and implement process improvements.
- Liaise between IT control owners and auditors to confirm control deficiencies and corrective actions.
- Monitor implementation of corrective actions.
- Serve as an advisor on matters of risk.
- Advise and support project teams in the implementation of internal control changes.
- Maintain a current understanding of industry best practices.
- Complete other duties as assigned.
**Qualifications: **
- Bachelor’s degree required.
- Three (3) plus years years in an IT Auditor or IT Risk Compliance role. (2LOD).
- SOX experience preferred
- Familiarity with the audit concepts of: internal controls identification, design, reviews of operating effectiveness, and how IT controls relate to financial reporting.
- Excellent organizational, multi-tasking, project management, and critical thinking skills.
- Excellent written/verbal communications skills and attention to detail.
- Ability to collaborate across functions and drive timely completion of deliverables.
- Understanding of the COSO 2013, COBIT, ISO 2700x, and NIST frameworks desirable, but not required.
- COBIT framework knowledge and CISA qualification are helpful but are not required.
Job Types: Full-time, Contract
Schedule:
- Monday to Friday
Application Question(s):
- Will you require sponsorship at anytime for our end client?
Education:
- Bachelor's (Required)
Experience:
- IT Auditor or IT Risk Compliance role.: 3 years (Required)
- SOX: 2 years (Preferred)
Work Location: Multiple Locations
