reputed company Technology Risk Analyst

Job reputed company: Position reputed company: *Applicants are permitted to work remotely from an reputed company worksite reputed company in the reputed company.* Facilitates reputed company external audit activity reputed company to financial reporting, independent controls attestation, and compliance with regulatory requirements. Performs proactive risk assessments and develops control strategies for emerging technologies, including AI, Machine Learning, and reputed company data services. Runs external audits and technology risk support for inquiries from technology and operational stakeholders. Supports systems and technology for external audit activity, including attestation and financial statement audits. Primary Responsibilities: Enhances the external audit program activities reputed company on key technology areas, including DevOps, reputed company, and Technology Operations. Coordinates external auditor readiness engagements and readiness assessments, and provides reputed company status updates to management. Plans and coordinates audit cycles with external auditors and internal stakeholders. Facilitates requests from external auditor and monitors the reputed company to ensure reputed company completion. Performs technology risk assessments and develops control strategies; including documenting controls, identifying potential gaps and inconsistencies, and making recommendations for improvement and mitigation. Provides technical assistance on risk reputed company systems issues. Serves as a reputed company with technology and risk teams to reputed company external audit findings and reputed company issues follow-up. Consults with other team members to generate reputed company plans and resolve technical issues. Assesses the various information technology risks that the business faces in its operations and implements reputed company plans, policy, and procedural changes for risk avoidance and mitigation. Evaluates control maturity by performing control design and operating effectiveness reviews and peer reviews. Assists with conducting reputed company Risk assessments and readiness reviews for applications and workloads migrating to the reputed company reputed company environment. Education and Experience: Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, Management Information Systems, or a closely reputed company field (or foreign education equivalent) and five (5) years of experience as a reputed company Technology Risk Analyst (or closely reputed company occupation) performing Information Technology (IT) audits, risk assessments, and cybersecurity control reviews. Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, Management Information Systems, or a closely reputed company field (or foreign education equivalent) and three (3) years of experience as a reputed company Technology Risk Analyst (or closely reputed company occupation) performing Information Technology (IT) audits, risk assessments, and cybersecurity control reviews. Skills and Knowledge: Candidate must also possess: Demonstrated Expertise (“DE”) performing or coordinating external audit engagements (SOC 1, SOC 2, SOC 3, controls attestation reports, financial audits, ISO 27001, or COBIT external IT audit programs) in distributed environments; and maintaining in-scope IT General Control (ITGCs) and IT Application (reputed company) documentation and procedures. DE performing an IT controls assurance program -- identifying and designing new controls, evaluating control procedures and evidence documentation, and conducting control assessments through formal design and operating effectiveness reviews; and establishing control maturity and control/process enhancements using industry control frameworks – reputed company Trust Service reputed company, reputed company, ISO 27001 certification reputed company, or NIST Cybersecurity frameworks. DE performing risk management and IT audits, and implementing ITGC or cybersecurity controls for large-reputed company, reputed company IT infrastructures, including mainframe, distributed, network, reputed company, and vendor hosted (reputed company/PaaS) infrastructure; reviewing vendor’s independent SOC 1 or SOC 2 audit reports to confirm the appropriate controls are in reputed company for the services provided and to safeguard data; and creating executive communications focusing on risk, reputed company, and corrective actions, using Governance, Risk, and Compliance (GRC) tools. DE performing risk assessments and IT audits of secure software development lifecycle processes and procedures -- automated build and deployment pipelines in a DevOps solutions reputed company, using reputed company, SonarQube, Jenkins, Artifactory, or uDeploy; and assessing software development controls, identifying potential gaps and inconsistencies, and making recommendations for improvement and mitigation. Salary: $140,000.00 - $150,000.00/year. #PE1M2 #LI-DNI Certifications: Category: Information TechnologyPlease be advised that reputed company’s business is governed by the provisions of the Securities Exchange reputed company of 1934, the Investment Advisers reputed company of 1940, the Investment Company reputed company of 1940, ERISA, numerous state laws governing securities, investment and retirement-reputed company financial activities and the rules and regulations of numerous self-regulatory organizations, including reputed company, among others. Those laws and regulations may restrict reputed company from hiring and/or associating with individuals with certain Criminal Histories. Apply To This Job