Senior IT Risk Compliance Analyst
A company is looking for a Senior IT Risk and Compliance Analyst.
Key Responsibilities
Assess compliance with policies, standards, and regulations through risk assessments and controls testing, providing remediation recommendations
Support coordination of internal and external audits, facilitating evidence collection and requests from audit teams
Establish and maintain a centralized compliance repository, including process documentation and training materials related to IT processes
Required Qualifications
5+ years of experience in IT Compliance, IT Audit, IT Risk Management, or IT Governance, preferably in a Public Accounting firm or SaaS company
Bachelor's degree in Information Security, Computer Science, Information Systems, or Accounting
Extensive knowledge of regulatory frameworks and compliance standards such as SOX, SSAE 18 (SOC), and HIPAA
Experience with technical risk assessments and providing risk mitigation recommendations
Possession of professional designations such as CISA, CISSP, or CPA is preferred
A company is looking for a Senior IT Risk and Compliance Analyst.
Key Responsibilities
Assess compliance with policies, standards, and regulations through risk assessments and controls testing, providing remediation recommendations
Support coordination of internal and external audits, facilitating evidence collection and requests from audit teams
Establish and maintain a centralized compliance repository, including process documentation and training materials related to IT processes
Required Qualifications
5+ years of experience in IT Compliance, IT Audit, IT Risk Management, or IT Governance, preferably in a Public Accounting firm or SaaS company
Bachelor's degree in Information Security, Computer Science, Information Systems, or Accounting
Extensive knowledge of regulatory frameworks and compliance standards such as SOX, SSAE 18 (SOC), and HIPAA
Experience with technical risk assessments and providing risk mitigation recommendations
Possession of professional designations such as CISA, CISSP, or CPA is preferred