UKG (Ultimate Kronos Group)
Sr Cyber Risk Analyst
UKG (Ultimate Kronos Group), Lowell, Massachusetts, United States, 01856
Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.
At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.
Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.
About the Team:
The Governance, Risk and Compliance (GRC) team enables the business in proactive identification, evaluation, mitigation, monitoring, and escalation of organizational risks. UKG evaluates risk holistic to the organization; including strategic, financial, compliance, cybersecurity, and operational risk. This position is part of a subset of the GRC team who partners with the product lifecycle teams: product management, engineering, and platform. As a member of that team, the individual will be committed to overall data protection risk management and its role in the company's continued success. The Senior Risk Analyst position is a highly visible role that interfaces with key stakeholders in the organization and may also support UKG customers and Partners. The position demands an organized, action-oriented team player with the ability to prioritize daily work and support multiple initiatives simultaneously; effective communication and customer focus is required. Primary responsibilities include performing risk assessments of UKG product, processes, and technologies to determine potential risk factors, quantifying risk and forecast probable outcomes, partnering with risk owners to determine mitigation activities, preparing reports to stakeholders to summarize their risk landscape and highlight attention areas, and staying attune to the organizations goals as processes/technologies evolve.
About the Role:
• Perform risk assessments for various business units that support product management lifecycle
• Identify and partner with Subject Matter Experts (SMEs) to develop appropriate remediation plans in alignment risk UKG methodology
• Document, report, and monitor remediation plans to closure in a GRC tool
• Coordinate and collaborate with other functional risk teams on a variety of initiatives with downstream impacts to UKG products
• Support compliance initiatives across multiple products as required (SOC1, SOC2, ISO 27001, etc.)
• Manage relationships with key leaders within your domain to establish trust, understand business objectives, and align risk assessment priorities to strategic initiatives
• Identify relevant key performance indicators (KPIs) to quantify the effectiveness of controls implemented for risk management activities
• Assist in compilation of materials to help ensure risk management statuses, trends, and escalations are rolled up to management
• Stay abreast of emerging trends, technologies, and regulatory changes to inform strategic planning and risk mitigation efforts
• Perform additional duties and projects as assigned by management
Basic Qualifications:
• BS/BA degree in Computer Science or IT audit related discipline or equivalent experience and a minimum of 5 years' work experience in GRC and/or related functions (such as IT audit or IT Risk Management)
• Familiarity with Governance, Risk and Compliance (GRC) tools
• Experience with information security frameworks including SOC 2 or ISO27001/17/18
Preferred Qualifications:
• Strong business acumen to include strong verbal and written communication skills
• CISA, CRISC, or similar risk and compliance certification preferred
Where we’re going
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!
Equal Opportunity Employer
Ultimate Kronos Group is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.
View The EEO Know Your Rights poster (https:www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf) and its supplement. (https:www.dol.gov/ofccp/regs/compliance/posters/ofccpost.htm)
View the Pay Transparency Nondiscrimination Provision (https:www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf)
UKG participates in E-Verify. View the E-Verify posters here (https:www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf) .
Disability Accommodation
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com .
The pay range for this position is $86,100 to $109,875, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG’s comprehensive benefits can be reviewed on our careers site at https:www.ukg.com/careers (https:www.ukg.com/careers)
It is the policy of Ultimate Software to promote and assure equal employment opportunity for all current and prospective Peeps without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status entitled to protection under federal, state, or local anti-discrimination laws. This policy governs all matters related to recruitment, advertising, and initial selection of employment. It shall also apply to all other aspects of employment, including, but not limited to, compensation, promotion, demotion, transfer, lay-offs, terminations, leave of absence, and training opportunities.
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.
At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.
Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.
About the Team:
The Governance, Risk and Compliance (GRC) team enables the business in proactive identification, evaluation, mitigation, monitoring, and escalation of organizational risks. UKG evaluates risk holistic to the organization; including strategic, financial, compliance, cybersecurity, and operational risk. This position is part of a subset of the GRC team who partners with the product lifecycle teams: product management, engineering, and platform. As a member of that team, the individual will be committed to overall data protection risk management and its role in the company's continued success. The Senior Risk Analyst position is a highly visible role that interfaces with key stakeholders in the organization and may also support UKG customers and Partners. The position demands an organized, action-oriented team player with the ability to prioritize daily work and support multiple initiatives simultaneously; effective communication and customer focus is required. Primary responsibilities include performing risk assessments of UKG product, processes, and technologies to determine potential risk factors, quantifying risk and forecast probable outcomes, partnering with risk owners to determine mitigation activities, preparing reports to stakeholders to summarize their risk landscape and highlight attention areas, and staying attune to the organizations goals as processes/technologies evolve.
About the Role:
• Perform risk assessments for various business units that support product management lifecycle
• Identify and partner with Subject Matter Experts (SMEs) to develop appropriate remediation plans in alignment risk UKG methodology
• Document, report, and monitor remediation plans to closure in a GRC tool
• Coordinate and collaborate with other functional risk teams on a variety of initiatives with downstream impacts to UKG products
• Support compliance initiatives across multiple products as required (SOC1, SOC2, ISO 27001, etc.)
• Manage relationships with key leaders within your domain to establish trust, understand business objectives, and align risk assessment priorities to strategic initiatives
• Identify relevant key performance indicators (KPIs) to quantify the effectiveness of controls implemented for risk management activities
• Assist in compilation of materials to help ensure risk management statuses, trends, and escalations are rolled up to management
• Stay abreast of emerging trends, technologies, and regulatory changes to inform strategic planning and risk mitigation efforts
• Perform additional duties and projects as assigned by management
Basic Qualifications:
• BS/BA degree in Computer Science or IT audit related discipline or equivalent experience and a minimum of 5 years' work experience in GRC and/or related functions (such as IT audit or IT Risk Management)
• Familiarity with Governance, Risk and Compliance (GRC) tools
• Experience with information security frameworks including SOC 2 or ISO27001/17/18
Preferred Qualifications:
• Strong business acumen to include strong verbal and written communication skills
• CISA, CRISC, or similar risk and compliance certification preferred
Where we’re going
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!
Equal Opportunity Employer
Ultimate Kronos Group is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.
View The EEO Know Your Rights poster (https:www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf) and its supplement. (https:www.dol.gov/ofccp/regs/compliance/posters/ofccpost.htm)
View the Pay Transparency Nondiscrimination Provision (https:www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf)
UKG participates in E-Verify. View the E-Verify posters here (https:www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf) .
Disability Accommodation
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com .
The pay range for this position is $86,100 to $109,875, however, base pay offered may vary depending on skills, experience, job-related knowledge and location. This position is also eligible for a short-term incentive and a long-term incentive as part of total compensation. Information about UKG’s comprehensive benefits can be reviewed on our careers site at https:www.ukg.com/careers (https:www.ukg.com/careers)
It is the policy of Ultimate Software to promote and assure equal employment opportunity for all current and prospective Peeps without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status entitled to protection under federal, state, or local anti-discrimination laws. This policy governs all matters related to recruitment, advertising, and initial selection of employment. It shall also apply to all other aspects of employment, including, but not limited to, compensation, promotion, demotion, transfer, lay-offs, terminations, leave of absence, and training opportunities.