Senior Analyst, IT Risk

The J.M. Smucker Company

Buffalo (NY)

Hybrid

USD 90,000 - 130,000

Full time

11 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Total Rewards Benefits Program

Thriving Together Philosophy

Inclusion, Diversity & Equity

Job summary

The J.M. Smucker Company is seeking a Senior Analyst, IT Risk to lead IT General Controls across Information Services and IS projects. The role supports annual SOX and financial statement audits and interfaces with staff at all levels within IS.

Location: Orrville OH with a flexible hybrid work arrangement (~25% in office). You will drive risk management initiatives, document controls, and collaborate with Financial Compliance to strengthen the control environment across on-premise and cloud

Qualifications

Bachelor's degree required.
3+ years of experience in internal controls, audit, or technology processes.
High standards of integrity and professional conduct.
Effective facilitation and project management skills.
Ability to analyze and resolve issues with limited information.
Ability to maintain relationships with business and IS teams.
Willingness to learn and adapt to changing requirements.
Attention to detail and ability to implement controls.

Responsibilities

Lead ITGC risk management across IS and projects.
Advise IS on IT general controls for on-premise and cloud environments.
Develop and implement recommendations to strengthen IS internal controls.
Ensure ITGCs are documented and aligned with SOX requirements.
Coordinate with Financial Compliance during audits and remediation.
Support risk assessments and 3rd party technology risk activities.
Maintain ITGC policies, narratives, and control self-assessment documentation.
Contribute to run model ITGC monthly, quarterly, and annual reviews.

Skills

Project management

Analytical skills

Interpersonal skills

Attention to detail

Willingness to learn

Integrity

Education

Bachelor's degree

Tools

IT General Controls

Sarbanes-Oxley compliance

IT service management (change/incident/problem)

Access and identity management

SaaS / IaaS / PaaS risk management

ServiceNow

Workiva

Oracle GRC

Oracle eBusiness Suite

Job description

Senior Analyst, IT Risk

Your Opportunity as the Senior Analyst IT Risk

The Senior Analyst Information Services Risk is responsible for facilitating the implementation of IT General Control standards across IS and within IS projects under limited supervision. This role is also responsible for facilitating support for the annual financial statement and SOX audit within IS. The Senior Analyst role will interface with all levels of staff and management within the Information Services organization.

Location: Orrville OH (Close proximity to Cleveland/Akron)

Work Arrangements: Flexible hybrid work arrangement ~25% in office presence

In this role you will:

Project Risk Management and IT General Controls (ITGC)
Serve as a trusted advisor across Information Services (IS) on IT General Control practices for both on-premise and cloud technologies
Develop and implement recommendations to improve the IS internal control environment
Participate on Information Services projects to ensure:
- ITGCs and sound internal controls are timely implemented and documented
- Data conversion activities are appropriately performed and documented
- Business process control adds/changes are evaluated for IT SOX scope impact
- Coordination of effort with Financial Compliance
- Champion the continued development of internal controls awareness within the IS organization including SOX requirements the Project Governance Checklist and report completeness and accuracy
- Guide IS to create and maintain IS control documentation
- Facilitate the development and sustained execution of run model IT General Control monthly quarterly and annual review activities
- Facilitate the remediation of thematic and complex IS internal control deficiencies

Support Annual SOX/Financial Statement Audit

Coordinates with internal and external audit to facilitate audit requirements related to run model controls and project implementations
Facilitate the remediation of identified audit findings
Facilitate refreshes of and enhancements to IS SOX policies narratives and control self-assessment documentation
Create and maintain the ITGC knowledge repository

Support Risk Management and Compliance

Participation in risk assessment activities across the organization including 3rd party technical risk assessments
Participate in risk management compliance and internal control initiatives as needed

The Right Place for You

We are bold kind strive to do the right thing we play to win and we believe in a strong community that thrives together. Our culture is rooted in our Basic Beliefs and we believe in supporting every employee by meeting their physical emotional and financial needs.

What we are looking for:

Minimum Requirements:

Bachelor's degree
3+ years of experience in internal controls audit or technology process
High standards of integrity
Effective facilitation and project management skills
Demonstrated ability to apply analytical skills in dealing with issues that are not readily defined or that conflict with available information
Ability to maintain organizational relationships with both business and IS
Willingness to learn
Attention to detail and ability to implement

Additional skills and experience that we think would make someone successful in this role (not required):

Experience with IT General Controls
Experience with Sarbanes-Oxley compliance
Experience with IT service management processes (change incident or problem management)
Experience with access and identity management processes
Familiarity with third-party technology (SaaS IaaS and PaaS) risk management
Experience with corporate standard systems including but not limited to: ServiceNow Workiva Oracle GRC Oracle eBusiness Suite HP Service Manager and HP Project & Portfolio Management

Learn more about working at Smucker: