Specialist, IT Risk & Compliance

Summary

The Specialist, IT Risk and Compliance is responsible for ensuring the IT Controls are working as designed and Compliance is met. The incumbent is able to interact with internal and external stakeholders and provide support and guidance around IT policies, risk and compliance.

Detailed Description

Performs tasks such as, but not limited to, the following:

• Establish and manage IT Security Awareness program
• Participates in the IT Risk assessments around data in scope for Crown Jewels 
• Provide guidance on IT controls improvements and implementation, assisting with the IT controls updates and re-design
• Participates on IT compliance projects and ensures team members are provided with timely and accurate project information and status updates. 
• Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits.
• Leadership - provides performance feedback on team members as well as instructs and supervises the work of IT Student Interns.
• Assists with policy and process changes to ensure the documents are up to date
• Interfaces with the business and IT teams where required to apply IT controls and/or improvements to the existing IT controls.

Knowledge/Skills/Competencies

• In-depth knowledge of the IT General Controls framework process. 
• Knowledge of IT analysis, design and development. 
• Proficient in IT Security  
• Proficient in Risk Mitigation and Business Controls 
• Proficient in Data Management and Analytics  
• Proficient in Delivering Initiatives within the Operating Model 
• IT Compliance Standards and best practices  
• Ability to work in a team environment 
• Change Management and project management skills 

Physical Demands

• Duties of this position are performed in a normal office environment.
• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Typical Experience

• 4 to 8 years of relevant experience. 

Typical Education

• Bachelors Degree or consideration of an equivalent combination of education and experience. Up to 8 years of experience with IT general controls or/and security best practices. 
• Available security courses around security and compliance. Working towards CISO certification
• Educational Requirements may vary by Geography.