IT Risk and Control Analyst

Aerostar Airports Holding; Carolina (PR); On-site; USD 70,000 - 100,000; Full time

Job summary

Aerostar Airport Holdings, LLC is seeking an IT Risk and Control Analyst to support the maturity of our IT risk and compliance program in a fast-paced environment at the Carolina, PR site.

The role emphasizes collaboration with risk and control teams, changes management, and assurance activities across IT initiatives, with a focus on regulatory readiness and process improvements for airport operations.

Qualifications

• Bachelor’s degree in information technology from an accredited university.
• Preferably 3 to 5 years of previous work experience in Information Technology, MIS, Change Management, IT audit, or related experience.
• Equivalent industry certification and experience required, with CRISC, CISA, or other professional certifications preferred.

Responsibilities

• Assist in the selection and tailoring of approaches, methods, and tools to support service offerings to applicable business units.
• Schedule, attend, coordinate, and conduct planned tests; document problems; assign problem resolution to individual(s); and monitors to ensure correction following the Change Management and Control Policy and Procedure.
• Ensure that the changes are justified; be carried out without prejudice to the availability of the IT service; are correctly registered, classified, and documented; they have been carefully tested and in testing environments.
• Performs general and application control reviews for simple to complex computer information systems.
• Review changes in the Change Management tool to ensure their quality and ensure the operational continuity of the affected IT service.
• Evaluate the post-implementation changes identifying opportunities for improvement in the project or application.
• Perform continuous risk monitoring across enterprise systems, including applications, physical access points, and user activity.
• Contribute to the maintenance of documentation for the department.
• Support the gathering of documentation/technical information in support of audit requests and issue remediation efforts.
• Act as a liaison between the application and risk and control teams for coordination of joint efforts of deployment of new or upgraded solutions.
• Execute any other duties assigned by the Supervisor.

Skills

Bilingual Spanish/English

IT risk & control

Auditing/Compliance

Change management

MS Excel

Education

Bachelor’s degree in information technology

Tools

MS Excel

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IT Risk and Control Analyst

Full Time Professional Carolina, PR, PR

30+ days ago Requisition ID: 1072

This position is responsible for supporting the effort to continue the maturity of the business by continually searching for opportunities to improve compliance processes, policy, and security risk dynamics and is responsible for the technical control process program, according to ITIL’s best practices. This job manages the risk assessment process for Information Technology initiatives and plays a key role in managing IT Risks and Compliance topics.

Essential Functions:

• Assist in the selection and tailoring of approaches, methods, and tools to support service offerings to applicable business units.
• Schedule, attend, coordinate, and conduct planned tests; document problems; assign problem resolution to individual(s); and monitors to ensure correction following the Change Management and Control Policy and Procedure.
• Ensure that the changes are justified; be carried out without prejudice to the availability of the IT service; are correctly registered, classified, and documented; they have been carefully tested and in testing environments.
• Performs general and application control reviews for simple to complex computer information systems.
• Review changes in the Change Management tool to ensure their quality and ensure the operational continuity of the affected IT service.
• Evaluate the post-implementation changes identifying opportunities for improvement in the project or application.
• Perform continuous risk monitoring across enterprise systems, including applications, physical access points, and user activity.
• Contribute to the maintenance of documentation for the department.
• Support the gathering of documentation/technical information in support of audit requests and issue remediation efforts.
• Act as a liaison between the application and risk and control teams for coordination of joint efforts of deployment of new or upgraded solutions.
• Execute any other duties assigned by the Supervisor.

Qualification Requirements:

• Bachelor’s degree in information technology from an accredited university or related experience in supporting regulated systems.
• Preferably 3 to 5 years of previous work experience in Information Technology, Management Information Systems, Change Management, IT audit, or related experience.
• Equivalent industry certification and experience required, with CRISC, CISA, or other professional certifications preferred.

Required Skills/Abilities:

• Language skills in Spanish and English. Ability to read and understand instructions, correspondence, and memos. Ability to write simple correspondence and make simple presentations of information, effectively, an individual or small group of customers and other employees of the organization.
• Presenting Technical Information & Quality Focus.
• Strong analytic thinking capacity.
• Strong quantitative problem-solving ability.
• Strong computer literacy with MS Office software. Expert in the use of MS Excel.
• Ability to work independently, organize workload, prioritize, multitask, foresee problems, and accomplish established work plans on a timely manner.
• Work with mathematical concepts such as probability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals skills. Ability to compute rates, proportions, and percentages, and draw and interpret simple graphs. Apply concepts such as fractions, percentages, ratios, and proportions to practical situations. Proficient with office equipment, computers, calculators, photocopy and fax machines, and phones.
• Ability to develop and maintain productive relationships with customers and internal departments.
• Ability to deal with problems involving some variables in common situations.
• Ability to stay current with emerging trends and regulatory developments in information technology and cybersecurity, including those specific to the critical infrastructure including airports, at the state, national, and industry levels.
• Technical support to airport and company equipment.
• Possessing experience with business process risk & control design.
• Possessing experience with security and ITGCs Controls.
• Possessing experience identifying key risks and controls, knowledge of Sarbanes Oxley readiness, controls optimization, as well as configuration of controls around security, and business process.
• Operating Systems, Attention to Detail & Information Security Policies.

Aerostar Airport Holdings, LLC is an Equal Employment Opportunity Employer.