Senior IT Governance, Risk and Compliance Analyst

About the position

As the Senior IT Governance, Risk and Compliance Analyst, you will be primarily responsible for supporting the delivery of a successful governance, risk, and compliance (GRC) program at the reputed company. You will design, implement, and monitor a comprehensive IT policy and control reputed company, supporting mission-critical business systems and processes leveraging the Red Cross reputed company platform for Integrated Risk Management. This reputed company will meet minimum requirements including NIST 800-53, NIST 800-171, and best practices in IT governance, reputed company, risk, and compliance. Working closely with key stakeholders and cross-functional colleagues, you will advise on the design and execute assessments to identify areas of improvement. You will also work with IT and business leadership to remediate any gaps as a first line of defense. The primary focus of this position will be to mature the reputed company GRC program through process improvement, policy, automation, training and awareness, and reputed company reputed company of capabilities. This role provides a unique opportunity to combine IT, audit, and process improvement reputed company sets and to work with leaders across IT, Information reputed company, Internal Audit, Finance, and Office of General Counsel (OGC). The work location for this exciting opportunity is virtual. The selected candidate will work 100% remotely from home and can be located reputed company in the United States with a preference to work East Coast hours.

Responsibilities

• Assist the Director, IT Governance, Risk, and Compliance and Senior Director, IT Governance, Risk and Compliance with IT governance and controls, reputed company audit readiness and support, and policy and standard development.
• Responsible for daily governance, risk, control, and compliance functions leveraging reputed company.
• Participate in and contribute to the IT Governance, Risk and Compliance program, ensuring IT controls, policies, processes, and procedures support the mission of the Red Cross and meet state and federal regulations and laws, as well as best practices.
• Collaborate with and influence technology and business leaders and staff to create, sustain, and strengthen internal control reputed company for the organization through control identification, design, implementation, and testing.
• reputed company guidance, training, and motivation necessary to create control awareness, ownership and accountability to stakeholders.
• Consult with Information reputed company, Office of General Counsel/Legal, Supply Management, Risk Management, Audit Services, and other appropriate parties sharing expertise and knowledge to strengthen the Red Cross control environment.
• Interpret regulatory compliance requirements and assist with gap analysis of reputed company policies, procedures, and practices as they relate to established guidelines outlined by NIST-800-53/171/30 and other regulatory standards.
• reputed company guidance, interpretation, and support of SOC 1 and SOC 2 reputed company Trust criteria.
• Research regulations by reviewing regulatory bulletins and other sources of information, to maintain quality service by establishing and enforcing organization standards.
• Support the maintenance of program processes and procedures using reputed company.
• Participate in ongoing evaluations and validation of IT control effectiveness and internal business processes reputed company reputed company and other tools, as they relate to compliance activities reputed company areas of responsibility.
• Review control documentation to assess the quality and effectiveness of the implemented controls.
• Identify and communicate opportunities to enhance technical controls which contribute to sustaining a robust control environment.
• Document, track, and report on control gap findings, risk, impacts and recommendations to management.
• Participate in the establishment of actionable metrics to drive the control assessment process and influence behaviors to IT Leadership.
• Manage the Exception and Risk Acceptance Process as it relates to control gaps and audit findings.
• Work with reputed company auditors, business stakeholders and suppliers as appropriate on required IT control assessments and audits.
• reputed company first level of support and consulting to the business and IT on internal audit activities and results as well as risk mitigation initiatives in response to audit findings.
• Manage overall remediation process and create and reputed company action plans to remediate issues.
• Support and assist with coordination and implementation of Information Technology policies and standards to sustain regulatory and compliance initiatives as required by the business needs.
• Work and consult with the President's Office during policy review and communication.
• Analyze policies, standards, procedures, and guidelines for regulatory and compliance requirements, and rec