IT Risk Compliance Analyst

Job id: 128948

Job Title: IT Risk & Compliance Analyst

Projected Start Date:

Projected End Date:

Client: Randstad/ Berkley Technology Services Des Moines

Job Location: Urbandale IA

Remote Work 100%

Job Overview:

We are seeking a skilled and experienced crossfunctional Governance Risk and Compliance consultant that can work with IT Compliance and IT Risk on assessments testing reporting and risk analysis within the Information Security Program.

Key Responsibilities:

• Assessments: Perform Risk Assessments to ensure proper design and associated risks (inherent and residual) for systems environments and domains analyzed.
• Ability or understanding to gather information to determine threat event frequencies loss event frequencies susceptibility and impact.
• Testing: Ability to test the design and operating effectiveness of quarterly/reoccurring IT controls that support our regulatory assessment programs (SOX NYDFS etc.).
• Ability to determine proper design of processes and ineffective processes and key elements of an effective process design.
• Understanding of key control points and able to perform walkthroughs and/or review of evidence to determine operating effectiveness.
• Risk Identification and Mitigation: Collaborate with crossfunctional teams to identify emerging risks assess their potential impact on the organization and develop mitigation strategies.
• Reporting: Ability to contribute towards creating reports for different audiences for IT and nonIT stakeholders (senior management executive leadership system owners and relevant stakeholders) to facilitate decisionmaking and drive continuous improvement efforts.

Preferred Qualifications:

• Experience with conducting IT/Cybersecurity audits risk assessments privacy assessments.
• Familiarity with CMMI FAIR NIST CSF ISO27001 CSC 18 and Privacy regulations.
• Experience with providing remediation recommendations for issues/findings.
• Experience with GRC tools (such as Archer ServiceNow etc.) and project management tools (Jira).
• Ability to lead walkthroughs and assessments with minimal oversight.
• Highly effective communication skills for management and sr. leadership