Memphis, TN, 38111, USA
4 days ago
GRC – Senior Security Risk Analyst
**_This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 10-12 days a month._** **_Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future._** **Responsibilities:** + Coordinate issue management within IBM OpenPages or similar issue management GRC Tools + Work with IT control owners to drive control remediation based on issues identified within audits or control assurance testing function + Aid in the implementation of control assurance functions by supporting development of control effectiveness tests + Support development for ServiceNow GRC, Policy and Compliance, or Integrated Risk Management (IRM) modules. + Understand business requirements related to risk and controls or GRC and work with software engineers to ensure business requirements are met + Analyze enterprise data (SIEM, endpoint security logs, etc.) to determine where data for control assurance activities can be gathered to meet development requirements + Plan and execute unit, integration, regression, and user acceptance testing (UAT). + Analyze, troubleshoot, resolve, and report issues + Participate in the requirements gathering phase to provide time estimation to client needs + Analyze technical development requirements + Create and update the configuration documentation + Seeks understanding of risks and procedures sufficient to understand the reasons for tasks being performed + Analyzes controls for adequacy of design and performs and/or supports control assurance testing activities + Performs other duties and responsibilities as assigned **Qualifications:** + 5+ years’ experience understanding and communicating business and technical requirements + Strong understanding of IT Security principles and controls + Experience supporting ServiceNow development efforts and user stories as part of agile development methodology is a plus + Experience with data analysis and data mapping + Identify and understand issues, problems and opportunities; compare data from different sources to draw conclusions. + Strong project management skills and ability to prioritize among high visibility projects + Use effective approaches for choosing a course of action or developing appropriate solutions; recommend or take action that is consistent with available facts, constraints and probable consequences. + Develop and use collaborative relationships to facilitate the accomplishment of work goals. + Make internal and external clients and their needs a primary focus of actions; develop and sustain productive client relationships. + Experience within a highly regulated environment like Financial Services preferred but not required + Certified Information Systems Security Professional (CISSP), Security+, GCCC or Certified Information Systems Auditor (CISA) or other cyber security certifications are differentiators; preferred but not required
Por favor confirme su dirección de correo electrónico: Send Email