Senior IT Risk & Security Analyst (Remote)

Symetra Financial Corporation; Northern (KY); Hybrid; USD 80.000 - 133.000; Vollzeit

Benefits dieser Stelle

Flexible full-time or hybrid telecommu

401(k) with company match up to 6%

Paid time off and holidays

Volunteer matching

Zusammenfassung

Symetra Investment Management is hiring a Senior IT Risk and Security Analyst to bridge IT, Audit Services, and business teams. You will manage IT risk assessments, oversee SOX ITGCs, and drive remediation across vendors and controls while developing executive dashboards for leadership.

You will collaborate with security teams, procurement, and legal to strengthen the risk posture and ensure sustainable compliance across technology and business functions.

Qualifikationen

• Strong knowledge of information security, IT risk management, audit methodologies, compliance frameworks, and internal controls.
• Experience leading complex risk assessments, audit programs, and compliance initiatives.

Aufgaben

• Serve as trusted advisor to IT and business teams by identifying risks and recommending controls.
• Lead enterprise IT risk management activities including annual risk assessments and risk reporting.
• Support third-party technology risk management across the vendor lifecycle, including due diligence and assessments.
• Manage IT audit and compliance programs to ensure controls are effective.
• Track audit findings with stakeholders to drive remediation and training.

Kenntnisse

Information security

IT risk management

Audit methodologies

Compliance frameworks

Stakeholder management

Ausbildung

Bachelor's degree in Information Systems/Cybersecurity/Accounting/Business

Tools

ISO 27001

SOX ITGCs

Jobbeschreibung

Symetra Investment Management is hiring a Senior IT Risk and Security Analyst to bridge IT, Audit Services, and business teams. You will manage IT risk assessments, oversee SOX ITGCs, and drive remediation across vendors and controls while developing executive dashboards for leadership.

You will collaborate with security teams, procurement, and legal to strengthen the risk posture and ensure sustainable compliance across technology and business functions.