Job Alert: Risk and Compliance Analyst

About the role

Risk and Compliance Analyst at StoneArch Services is needed for a full-time position.

Responsibilities

• Planning, performing, monitoring and reporting on components of varying complexity in regards to IT compliance as well as other assigned projects within information system areas of the Company.
• Performing assigned portions of IT compliance programs, determining compliance with policies and procedures, monitoring, recommending corrective action, preparing findings and assisting with remediation plans.
• Reviews and services should be performed in accordance with professional and department standards.
• Performs assigned components of moderately complex compliance tasks with moderate supervision, which may include planning, risk analysis, customer interaction, testing, and reporting procedures in accordance with appropriate professional and department standards.
• Develops work programs.
• Holds discussions with management regarding processes and noted control weaknesses.
• Prepare draft reports to management to communicate final results including recommendations for improving information system practices and controls.
• Understands and prioritizes work according to time and resource constraints.
• Obtains buy-in and ownership from management for observations and remediation plans.
• Works with Internal Audit, external auditors, management and staff to identify feasible resolutions to control weaknesses and opportunities for improvement.
• Plans and executes compliance reviews.
• Provides on the job and other training to less experienced compliance staff, in a team environment, as assigned by the in-charge.

Qualifications

• PREFERRED EDUCATION: Bachelor’s Degree in Computer Information Systems, Information Technology, or related field
• REQUIRED EXPERIENCE: Three to five years’ experience in IT risk and compliance, IT governance, IT auditing or an IT related field preferred.
• PREFERRED EXPERIENCE: Big 4 accounting firm experience a plus
• PREFERRED CERTIFICATION(S): Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA)

KNOWLEDGE, SKILLS AND ABILITIES:

• Good written and verbal communication skills, a high degree of personal integrity, attention to detail and strong investigative skills.
• Requires analytical and communications skills to understand customer objectives, evaluate risks and controls and accurately document and support work performed and conclusions reached.
• Competent working knowledge of operating systems, application development, change management, operations, networking and telecommunications, databases, business continuity, disaster recovery and physical and logical security.
• Capable of working under minimum supervision, planning and conducting IT compliance reviews.
• Strong knowledge of compliance practices, IT audit and Company operations is preferred.
• General knowledge of internal control concepts, principles, risk analysis, FISMA, PCI Compliance, HIPAA, Privacy, process improvement and techniques, including frameworks such as NIST, ISO2700, COSO and COBIT.
• Able to interact well with customers and be able to provide guidance and counseling to assigned department staff as well as react to department management needs.
• Able to work in a fast-paced environment and manage multiple projects concurrently.
• Able to regularly communicate progress to appropriate stakeholders.
• Efficiently manages resources and understands work/project scope, key players, urgency, inherent risks and business benefits.
• Displays and promotes high standards of ethical conduct and behaviors consistent with organizational and government standards.
• Consistently carries out job responsibilities to meet deadlines.
• Able to deliver on commitments as promised and able to acknowledge when commitments are not met and takes appropriate steps to fulfill what has been promised.
• Able to clearly and effectively convey information to individuals or groups.