Javen Technologies
Sr IT Risk & Compliance Analyst
Javen Technologies, Chicago, IL, United States
Job Title: Sr. IT Risk & Compliance Analyst
Like the look of this opportunity Make sure to apply fast, as a high volume of applications is expected Scroll down to read the complete job description.
Location: Chicago, IL
Duration: 12+ Months Contract
Onsite/Hybrid Role
Required: Risk & Compliance ANalyst, Certifications, CISA, Risk, Compliance, Control testing
Job Description: Responsibilities will include but are not limited to:
- Collaborate with IT personnel to understand operational processes to identify process improvement opportunities, control gaps and provide control recommendations.
- Responsible for developing and maintaining process and control documentation, including but not limited to narratives and flowcharts for key IT processes.
- Assist with the implementation and execution of processes within the IT Risk & Compliance group that supports the proactive evaluation, identification and monitoring of IT risks and controls.
- Assist with building an IT control testing program to periodically evaluate IT controls for effectiveness and ensure alignment with control frameworks.
- Assist with implementing continuous monitoring of IT controls and working with data for efficient control testing.
- Assist with maintaining the IT policy and procedure library including executing a process to ensure documents, standards and other related materials remain current.
- Perform various reviews, as necessary to validate compliance with IT policies, regulatory requirements, and other internal frameworks.
- Lead and assist in periodic risk and control self-assessments.
- Collaborate with 2nd and 3rd line to maintain alignment with risk position and control testing.
- Assist IT personnel with the development, maintenance, and monitoring of KRIs and KPIs, including providing value added feedback and recommendations when tolerances are exceeded, or metrics require revision.
- Assist with other duties as assigned.
QUALIFICATIONS AND EDUCATION REQUIREMENTS
- Bachelor's degree in technology, Business or Accounting.
- Certification in Information Technology or Risk Management (CRISC, CISA, CIA, CRMA)
- Experience in performing walkthroughs, risk assessments, and control testing.
- Experience in testing Information Technology General Controls.
- Familiarity with Internal Control frameworks (COSO) and Information Technology frameworks (COBIT, NIST, and ITIL.)
- Minimum of 4 years of IT audit or risk management experience with a focus on technology.
PREFERRED SKILLS:
- Data Analysis skills are a plus.
- Experience in assessing Security controls (Access Management & Cybersecurity)
- Ability to solve problems and demonstrate creativity and innovation to provide fresh ideas and approaches to process improvements and control testing.
- Ability to manage ambiguity and changing priorities.
- Strong analysis, research, and analytical skills
- Effective communication skills and ability to influence.