IT Risk & Compliance Specialist

Description IT Risk & Compliance Specialist 25 Amica Way, Lincoln, RI 02865 Thank you for considering Amica as part of your career journey, where your future is our business. At Amica, we strive to build a culture of belonging where employees are encouraged to share their unique experience to enrich our workplace, strengthen our company’s mission and broaden our vision of what’s possible. We’re focused on creating a workplace that works for all. We’ll continue to provide training, guidance, and resources to make Amica a true place of belonging for all employees. Want to learn more about our commitment to diversity, equity, and inclusion? Visit our DEI page to read about it! As a mutual company, our people are our priority. We seek differences of opinion, life experience and perspective to represent the diversity of our policyholders and achieve the best possible outcomes. This is a full-time position based on a 37.5-hour work week. The starting annual salary is between $68,912 - $103,235 based on the level of previous experience. In addition, hired applicants will be eligible for the company’s annual variable incentive paid based on company performance. This role is open to full-time remote work, or hybrid onsite in our Lincoln, RI office. Our normal business hours are Monday – Friday, 8am – 5pm Eastern Time. This role does not currently offer employment visa sponsorship. Position Summary Our Lincoln, RI office is seeking an IT Risk & Compliance Specialist who will collaborate with business unit management to manage and assess, on an ongoing basis, all aspects of technology and operational risk. This position participates in strengthening the control environment and reducing risk against the business unit’s risk profile and tolerances. Responsibilities Collaborate with IT Leadership, Enterprise Cybersecurity, Internal audit and Enterprise Risk Management as well as Divisional risk and compliance teams. Build, challenge, test, document and assess risks and controls of CIS business processes in support of internal and external regulations and policies. Coordinate the development of IT policies, communicate those policies and standards within CIS and across Amica, and ensure compliance with internal and external regulations and policies. To be CIS custodian of the enterprise GRC tool; to train and develop internal procedures and guidelines. Identify, create, and manage risk issues from remediation to closure. Function as a data steward to assess third party risks. Lead in the identification, collection and management of metrics related to various IT risk and control areas. Coordinate internal and external audit testing, documentation, and remediation activities. Develop, maintain, and mature an effective end-to-end IT risk and compliance management program. Provide subject matter expertise regarding regulations, operational risk, governance, security, and control frameworks that affect CIS. Develop a broad and detailed understanding of the organization’s landscape, culture, and technology. Understand the various businesses and the applicable regulations which govern them. Share knowledge to ensure individuals and teams have the appropriate breadth and depth to offer support to the business, projects, and day-to-day operations. This may include mentoring, providing effective guidance and/or feedback. Serve as an internal champion of change initiatives undertaken by the organization. Actively seek out opportunities to learn and apply emerging trends such as best practices and standards. Look for challenging assignments that add value to the organization and apply learnings from those opportunities in his or her own role. Independently learn from failures or missteps and apply learnings in various contexts. Foster a culture that values learning and creativity both individually and as a team. Identify continuous improvement opportunities to automate development, provisioning, and release work to accelerate and improve the quality of solutions delivery. May be called upon to handle other duties as required. Requirements Bachelor's degree and 2 years’ experience with IT process analysis, or, an equivalent combination of education and experience sufficient to successfully perform the essential functions of the job. CISA, CRISC, CISM or relevant certifications a plus. Committed to continuous learning through training sessions, seminars and other avenues including but not limited to the immediate job. Ability to handle routine work independently and learn increasingly more complex work. This includes the needed functional/technical skills as well as the ability to appropriately problem solve. Ability to communicate effectively within the immediate team to gain details about planned work, report on completed work and suggest possible next steps. Is beginning to communicate across teams. Strong business writing skills and analytical skills. Ability to effectively communicate with all levels of the organization. Organization skills to support multiple complex assignments. Strong influencing and negotiating skills. Experience within an agile DevOps environment a plus. Total Rewards Medical, dental, vision coverage, short- and long-term disability, and life insurancePaid Vacation – you will receive at least 13 vacation days in the first 12 months, amounts could be greater depending on the role. While able to use prior to accrual, vacation time will accrue monthly.Holidays - 14 paid holidays observedSick time - 6 days sick time at hire, 6 additional days sick time at 90 days of employment Generous 401k with company match and immediate vesting. Additionally, annual 3% non-elective employer contributionAnnual Success Sharing Plan - Paid to eligible employees if company meets or exceeds combined ratio, growth and/or service goalsGenerous leave programs, including paid parental bonding leaveStudent Loan Repayment and Tuition Reimbursement programGenerous fitness and wellness reimbursementEmployee community involvementStrong relationships, lifelong friendships Opportunities for advancement in a successful and growing company Amica conducts background checks which includes a review of criminal, educational, employment and social media histories, and if the role involves use of a company vehicle, a motor vehicle or driving history report. The background check will not be initiated until after a conditional offer of employment is made and the candidate accepts the offer. Qualified applicants with arrest or conviction records will be considered for employment. The safety and security of our employees and our customers is a top priority. Employees may have access to employees’ and customers’ personal and financial information in order to perform their job duties. Candidates with a criminal history that imposes a direct or indirect threat to our employees’ or customers’ physical, mental or financial well-being may result in the withdrawal of the conditional offer of employment. About Amica Amica Mutual Insurance Company is America’s oldest mutual insurer of automobiles. A direct national writer, Amica also offers home, marine and umbrella insurance. Amica Life Insurance Company, a wholly owned subsidiary, provides life insurance and retirement solutions. Amica was founded on the principles of creating peace of mind and building enduring relationships for and with our exceptionally loyal policyholders, a mission that thousands of employees in offices nationwide share and support. Equal Opportunity Policy: All qualified applicants who are authorized to work in the United States will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, family status, ethnicity, age, national origin, ancestry, physical and/or mental disability, mental condition, military status, genetic information or any other class protected by law. The Age Discrimination in Employment Act prohibits discrimination on the basis of age with respect to individuals who are 40 years of age or older. Employees are subject to the provisions of the Workers' Compensation Act. Amica Mutual Insurance Company is committed to protecting job seekers from recruitment fraud. We never request sensitive personal information or payment during the interview process. All legitimate job opportunities are listed on our official careers site: https://careers.amica.com. Learn more in the "Is Amica hiring?" section of our FAQ. rp