Senior Technology Compliance Analyst-Public Sector (US Remote) - 29858

Splunk Inc; Washington (District of Columbia); Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a motivated Senior Analyst to enhance technology assurance and risk management services. This exciting role involves building strong partnerships with business owners to drive risk mitigation and internal controls management. You will engage in technology assessments, ensuring compliance with industry standards and frameworks. The position requires analytical skills, leadership, and the ability to thrive in a dynamic environment. Join a team that values your authentic self and offers a chance to make a significant impact in a supportive and innovative workplace.

Qualifications

• 5+ years in risk management and compliance auditing.
• Hands-on knowledge of IT & Engineering technologies and cloud applications.

Responsibilities

• Plan and execute technology and security assessments.
• Identify and mitigate risks and internal control gaps.

Skills

Risk Management

Compliance Auditing

Analytical Skills

Leadership

Communication Skills

Problem-Solving

Team Collaboration

Data Analysis

Education

Bachelor's Degree in Information Systems

Master's Degree in Computer Science

Professional Certifications (CISSP, CISM)

Tools

MS Excel

MS Word

MS PowerPoint

Job description

Splunk is here to build a safer and more resilient digital world. The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place to work. If you become a Splunker, we want your whole, authentic self, what we call your "million data points". So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you.

Role: Splunk is looking for a motivated Senior Analyst who is passionate about delivering technology assurance, advisory, compliance and risk management services to the company. This position builds consultative, partnership relationships with business owners to drive risk mitigation, process gaps, maturity and internal controls management. You are a detail oriented, analytical, upbeat and creative leader and someone who thrives in a dynamic environment. This position reviews the maturity and effectiveness of key technologies, infrastructure, systems, processes to ensure that internal controls are in place to address key risks. The position may require willingness and ability to travel (domestic and international) for approximately 10 to 20% of the time.

Responsibilities:

• You will own the planning and execution of technology and security assessments within Splunk's Operations / Engineering / Technology areas.
• You will ensure proper identification and mitigation of risks / processes / internal control gaps that have potential operational, financial, strategic and compliance risk implications.
• You will engage with multi-functional partners on new and ongoing business transformation projects for analyzing problems, assessing risk, developing improvement opportunities and / or corrective actions, building consensus and supporting implementation of remediation solutions.
• You will own the follow up on committed action plans to ensure appropriate and timely mitigation of identified risks.
• Hands on experience in assessing risks and controls in technology processes, cloud applications, cloud infrastructure, ERP systems, IDM tools, security solutions, Vul Management tools, encryption technologies, service management and operations platforms etc.

Requirements:

• 5 or more years of experience with implementing and auditing controls from industry and regulatory frameworks and standards specific to Public Sector areas of Cloud Compliance - FedRAMP, DISA SRG, NIST 800-53r4 / 5, CMMC, DFARs or the RMF Process.
• Bachelor or Master's Degree in Information Systems, Computer Science, Information Technology or equivalent.
• Hands on knowledge of reviewing common IT & Engineering technologies including OS, databases, network infrastructure, application security, Linux / Windows system security, networking, mobile device security, cloud technologies and applications (IaaS, SaaS, PaaS environments, etc.).
• Technical knowledge pertaining to containerization cloud concepts and implementations is a plus.
• Strong leadership, communication, presentation and interpersonal skills to be able to interact with technical, non-technical colleagues and management.
• Proficient in systems / technology “As-Is vs. To-Be” analysis.
• Essential that you are a team-player.
• Highly motivated, enthusiastic, efficient and works independently to multitask and lead workload to timely completion.
• Experience in international company operations and proficiency in foreign language a plus.
• Familiar with Enterprise Risk Management (ERM) concepts a plus.
• Unquestionable integrity and credibility.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Education:

• Bachelor’s degree preferably in Technology, Engineering, Business or equivalent.
• Professional certifications e.g. CISSP, CEH, CIPP, CISM, PMP, CISA are a plus.
• Demonstrated skill in MS Excel, Word and Presentation with a general understanding of data analysis techniques.