IT Compliance Analyst

OpenKrill; United States; On-site; USD 100,000 - 170,000; Full time

Job summary

Openkrill is seeking a skilled IT Compliance and Audit professional to oversee internal and external audit activities, and manage PCI compliance efforts. The role requires designing an IT audit plan, coordinating across the organisation, and maintaining a central controls register in support of risk and regulatory obligations.

Responsibilities include aligning policies with customer expectations, developing reporting methods, and running regular audit cycles.

Qualifications

• Excellent communication skills, written and verbal.
• Strong stakeholder engagement abilities.
• Experience in risk, compliance or internal audit governance.
• Ability to design and close out internal audit activities.
• Time management under reporting deadlines.

Responsibilities

• Oversee External/Internal Audit requirements.
• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions from audit activity.
• Maintain a central register of IT controls to support risk and regulatory obligations.
• Improve documentation of internal processes related to audit.
• Oversee IT Compliance activities, aligning policies with customer expectations and developing reporting mechanisms.
• Run weekly, monthly, quarterly reporting and audit check cycles.
• Assist with PCI compliance processes, including attestation and data loss prevention considerations.

Skills

Communication

Stakeholder management

Data analysis

Time management

Risk, compliance, audit

Education

Tertiary qualification or relevant specialist certification in risk, compliance or internal audit

Job description

Position PurposeTo oversee the internal and external IT compliance and audit processes and frameworks.Role AccountabilitiesAccountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group’s PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.
• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.

Essential Qualities

• Collaborative
• Decision maker
• Problem solver
• Excellent communicator
• Efficient and effective
• Innovative and creative
• Analytical
• Proactive
• Exceptional stakeholder management skills, able to build relationships, influence and engage.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• A positive, curious and flexible attitude.

Qualification & Experience RequirementsWhat is the typical background required to competently perform the responsibilities of the job?

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• Time management skills under reporting deadlines
• Stakeholder engagement skills
• Data analyst skills