Job Description

The Opportunity: 

The Senior Analyst, GRC role is to assist the development and improvement of the IT compliance programs by determining the effectiveness, adequacy, and efficiency of IT general controls. This position requires knowledge of and testing practices related to IT general controls, network operating environments, network components, information technology infrastructures, operating systems, servers, information security management, relational database management systems, program changes, web applications, BCP/DR, and systems development life cycles. The Senior Analyst, GRC must understand and apply IT frameworks and standards (i.e. COSO) and have the ability to assess financial, operational, and regulatory risks as they relate to the use of information technology. The Senior Analyst, GRC is responsible for managing and prioritizing assignments based on the fast paced and changing environment while also ensuring high quality work product and adherence to deadlines. Strong communication, interpersonal skills, analytical abilities, and attention to detail are required.

What Your Impact Will Be: 

Facilitate applicable information security audits, including SOC1, SOX, and PCI.

Understand the business processes, internal control risk management, and IT general controls (ITGCs) to be able to test applications, operating systems, and databases.

Work with management to design and test controls (i.e, ITGC, interfaces, key reports) for new applications.

Conduct walkthroughs with control owners and application teams to document their control processes in narratives.

Support internal and external auditors to escalate follow-ups.

Work with control owners and application teams to identify root cause of identified deficiencies and to develop appropriate remediation plans.

Perform other duties as assigned or necessary.