Senior IT Risk & Compliance Analyst: Controls & Dashboards

247Hire; Chicago (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

247Hire is seeking a Senior IT Risk and Compliance Analyst to support the Bank's GRC, Enterprise Risk Management, and SOX compliance. The role involves collaborating with IT teams to map processes, identify technology risk, and design controls aligned with COSO, COBIT, NIST, ISO, and ITIL frameworks.

The analyst will monitor IT controls, perform testing, and aid in audits. Candidates should have a bachelor’s degree and at least four years in IT audit or risk management, plus relevant

Qualifications

• Bachelor’s degree is required.
• Minimum 4 years of IT audit or IT risk management experience.
• Industry certification in Information Technology or Risk Management.
• Demonstrated capability to perform risk assessments and ITGC testing.
• Knowledge of COSO, COBIT, NIST, ISO, and ITIL frameworks.

Responsibilities

• Collaborate with IT personnel to understand processes and offer improvement recommendations.
• Identify technology risk and help develop and validate controls.
• Ensure technology controls align with industry frameworks.
• Implement continuous monitoring of IT controls and analyze data for control testing.
• Support daily monitoring, issue remediation, and external audits as needed.
• Create dashboards and reporting to inform stakeholders.

Skills

Data analysis

IT risk testing

Process improvement

Adaptability

Communication

Automation tools

Education

Bachelor's degree

Tools

Tableau

UI Path

Job description

247Hire is seeking a Senior IT Risk and Compliance Analyst to support the Bank's GRC, Enterprise Risk Management, and SOX compliance. The role involves collaborating with IT teams to map processes, identify technology risk, and design controls aligned with COSO, COBIT, NIST, ISO, and ITIL frameworks.

The analyst will monitor IT controls, perform testing, and aid in audits. Candidates should have a bachelor’s degree and at least four years in IT audit or risk management, plus relevant