Senior Specialist, IT Risk and Compliance

Summary

The Senior Specialist, IT Risk and Compliance requires extensive experience with Regulatory Compliance (IT SOX, NIST, ISO) in order to be capable of managing IT controls and monitoring activities while coordinating IT compliance projects. The incumbent will interact with internal and external stakeholders and provide support and guidance around IT policies, risk and compliance.

Detailed Description

Performs tasks such as, but not limited to, the following:

• Ensures IT controls are regularly tested/assessed and provides solutions for mitigation where required
• Implements effective monitoring and assessment processes and provides guidance where needed to address any potential gaps
• Develops and supports project management processes, guidelines and products. Provides project planning support for project gating. Organizes and supports project management training.
• Provides expertise to the business and IT teams on IT controls improvements and implementation, assisting with the IT controls updates and re-design
• Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits
• Assists with policy and process changes to ensure the documents are up to date

Knowledge/Skills/Competencies

• Technical knowledge of specific areas of computer operations/applications support
• Extensive knowledge of IT controls testing, monitoring, mitigation
• Knowledge of the latest IT SoX requirements and controls structure
• Proficient in IT Security
• Knowledge of risk mitigation and business controls
• Knowledge of data management and analytics
• Knowledge of delivering initiatives within the Operating Model
• Knowledge of project management
• Proficient in architecture and solution integration 
• Knowledge in business partnering
• Knowledge of IT controls framework
• Knowledge of IT audit structure/techniques
• Excellent verbal and written communication skills.
• Creative problem solving skills.
• Knowledge of IT delivery/operations.
• Excellent Project Management skills
• Ability to work in a team environment.
• Cross-functional coordination skills.
• Change Management skills
• Strong customer management skills
• Ability to clearly articulate the role that IT can play in enhancing the customer's activities

Physical Demands

Duties of this position are performed in a normal office environment.

Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Typical Experience

Between 7 to 12 years of experience and obtaining the CISO certification.

Typical Education

• Bachelor's degree in related field or consideration of an equivalent combination of education and experience.
• Educational Requirements may vary by Geography