IT Risk Compliance Analyst
IT Risk Compliance Analyst
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
SHORT DESCRIPTION:
Must Haves:
3 years of IT security IT audit or other controls experience
Experience and knowledge with Identifying control gaps drafting remediation plans ushering remediation aspects through
Assurance experience: audit compliance risk assessments vulnerability assessments and compliance assessments
Technical experience with the following: Service Now vulnerability scanning firewall and firewall policy testing SIEM tools GRC tools patching tools
Plusses:
CISA or CRISC Certifications
Experience with SOX and PCI controls
Experience with the following: Splunk Tenable CyberArk
Day to Day:
TECO is seeking a Compliance and Risk analyst local to the Tampa area to join the Risk & Compliance team. They will be responsible for the following:
Assurance and Information Management: Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements Sarbanes Oxley (SOX) PCI contractual requirement
Support collection review and approval of compliance evidence including accessing network monitoring tools and security tools to gather evidence during assurance activities.
Administers the IT Compliance Management Systems and Governance Risk and Compliance (GRC) tool(s). Collect and sample evidence to support demonstration of compliance. Escalates out of compliance items to senior management. Participate in the implementation of technology based tools (e.g. GRC) to support IT risk initiatives. Additionally analyst adheres to company confidentiality and security requirements.
Documents noncompliance issues provides recommendations and Shepards remediation actions to ensure in their resolution. Performs quality audits across various IT&T functions to ensure quality standards procedures and methodologies are being followed. Monitors and reports on exceptions risks and exposures to IT senior management.
Conducting fact based assessments of new and existing systems and technologies Assessing the effectiveness of regulatory compliance controls. Providing subject matter expertise to help internal stakeholders manage risk and controls
Employment Type
Full Time
