Senior Analyst IT Governance, Risk & Compliance

Embedded Shishya; Deutschland; Remote; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

Embedded Shishya is seeking an experienced IT Auditor to review information systems for compliance with obligations, policies and regulatory mandates, and to support IT risk assessment and business continuity planning.

You will collaborate with management to quantify risks, develop countermeasures, document conformance to standards, and guide governance on improvements across IT processes. Strong communication is essential for this role.

Qualifikationen

• Bachelor’s degree in computer science, IT, information systems, or a related business discipline.
• 8 years IT experience in ITSM/technology management with broad IT knowledge.
• Experience applying quality standards and IT auditing techniques.
• Ability to report progress and financial conformance; strong written and verbal communication.

Aufgaben

• Review information systems for compliance with IT obligations, standards, policies and regulatory mandates.
• Perform risk assessments and document probability and impact of risk events.
• Monitor risks and report status and required actions to senior management.
• Assist with developing countermeasures and disaster recovery/business continuity plans.
• Provide guidance on standards interpretation and quality management across IT processes.

Jobbeschreibung

Key Job Accountabilities

Review current and proposed information systems for compliance with Client IT obligations (including IT processes, agreed standards, policy and procedures, IT risk compliance, applicable legislation, regulatory and contractual mandates) and adheres to IT strategy. Conduct risk assessment as directed, using standard processes for identifying potential risk events and assist with quantifying and documenting probability of occurrence and impact on the business. Monitor status of risks, and reports status and need for action to senior colleagues. Demonstrate financial awareness as a part of risk management (e.g., cost-effectiveness analysis of proposed counter measures). Assist with development of agreed countermeasures and contingency plans. Work with the appropriate level of management in the organization to create, test and maintain disaster recovery plans and business continuity plans for those information systems which support critical business processes. Establish the goals and approach for performing functions within the disaster recovery. Prepare business continuity scenarios to assure continuous business operations. Work with the organizations management to define employee awareness and training programs that communicate responsibilities for business continuity. Define criteria on roles and responsibilities of business continuity. Collect, collate, and examine records as part of specified testing strategies for evidence of conformance with management directives, or the identification of abnormal occurrences. Analyze evidence collated and drafts part, or all formal reports commenting on the conformance found to exist in the reviewed part of an information systems environment. Report issues and non-compliances and provides specialist advice to those accountable for governance to correct compliance issues. Conduct formal audits or reviews to ensure compliance with organizational standards for activities, processes, data, products, or services. Investigate and document the internal control of specified aspects of automated, partly automated, or manual processes, and assess compliance with relevant standards. Provide guidance on the interpretation of relevant national and international standards, with respect to the quality system. Provide advice and guidance on the development, documentation and application of standards, procedures, and other quality managed processes.

Qualifications

• Bachelors degree in computer science, Information Technology, Information Systems, or a bachelors degree in any Business discipline.
• 8 years IT experience in a technology management ITSM service management role with widespread knowledge of IT. Application of specific quality standards to all tasks undertaken. Principles, practices, tools, and techniques of IT auditing knowledge.
• Methods and techniques for reporting progress and financial conformance experience. Has a good overall knowledge of wide areas of information systems practice and applications. Communicates well, both orally and in writing, and has the skill to influence through persuasion in a formal context. Understands the need to maintain a practical and pragmatic approach to standards compliance.
• Ability to apply standards, practices, codes, and assessment and certification programs relevant to the IT industry and the specific organization or business domain. Ability to leverage system or method for the management of quality Information Technology practices, including quality planning, assurance, and control.