IT GRC Analyst (IAM/DP)

Berkley • Wilmington, Delaware, United States • 1w ago

Company Details

Company URL: https://www.berkleytechnologyservices.com/

Berkley Technology Services (BTS), a member company of W. R. Berkley Corporation, has facilities located in Des Moines, Iowa and Wilmington, Delaware and provides results-driven software applications, system connectivity, and world-class operational support across the enterprise. Offering an entrepreneurial and innovative culture, we enable team members to be on the cutting edge of technology while delivering high quality solutions. Additionally, we provide a competitive compensation and benefits package including a casual dress code and flexible work arrangements. BTS is constantly growing and expanding to meet the changing demands of one of the most successful insurance organizations in the world. Visit us at https://berkley-bts.com to learn more about BTS and the career opportunities we have available!

Berkley Technology Services: Right Team, Right Technology, Simple and Secure.

Responsibilities

Berkley Technology Services (BTS) is hiring an IT GRC Analyst (IAM/DP) reporting to the Director, IT Regulatory and Compliance. This is an exciting role for an IT GRC analyst to be part of a global Fortune 400 (W.R. Berkley) Governance Risk and Compliance program’s operational activities. Working in concert with other Compliance, Information Technology, Information Security, and Business Unit functions, the IT GRC Analyst will ensure our overall control environment and corresponding activities/controls are aligned to our policies, standards and/or relevant regulations. This role will focus on controls around identify and access management and data protection processes but may also be involved in control assessments across information security and information technology. He/she will review controls and standard operating procedures across the programs from both a design and operating effectiveness perspective. The IT GRC Analyst will document control assessments and other reviews by gathering evidence and documentation of workpapers. Additionally, this role will have input into risk assessments and issue documentation/tracking to support the full lifecycle of GRC operations. On our team, you’ll actively engage with technical and compliance/legal teams, business units to perform and advance IT GRC operations. To do this, you’ll be hands-on and help drive processes and procedures with other IT GRC professionals dedicated to the mission and vision of Berkley IT GRC operations.

Perform process reviews and control assessments around identify and access management and data protection processes, including Cloud-based platforms/environments
Provide governance and compliance direction around identify and access management and data protection operations to ensure adequate alignment to internal policies and regulatory requirements. Provide feedback to ensure appropriate scope/coverage of processes.
Review control processes and procedures areas to help drive control improvement and automation with technology teams/processes to help enhance overall business operations.
Help document IT and Security controls testing results and/or findings, including the gathering and organizing of documentation or evidence collected.
Participate in risk assessments through review of technology and security controls, and other due diligence activities.
Assist with findings across all compliance related activities are documented and tracked for remediation, with direct involvement by either facilitation of discussions, or by being directly involved in the process.
Assist on external audits to facilitate the process of gathering any requested information and/or documentation.
Understand and help provide guidance with regulations such as Sarbanes-Oxley (SOX), NY CCR Part 500 Cyber Security Regulation, General Data Protection Regulation (GDPR), and/or California Consumer Privacy Act (CCPA).
Provide input in the research and development of IT General Control (ITGC) Framework, and development of standards and controls.

Qualifications

Minimum of 5 years of hands-on experience within Governance, Risk, Compliance with an emphasis on control/process/vendor assessments and regulatory compliance.
College Degree, CS, IT or related technical discipline
Experience within the Insurance or Financial industries, along with relevant certifications as CISA, are preferred.
Able to demonstrate experience around identity access reporting and reviews, access related controls (hires/terms/transfers), and revocation business impact analysis
Experience with entitlement review platforms such as Sailpoint, Stealthbits or Varonis
Able to demonstrate experience around data protection controls such as endpoint device protection, data classification and data loss prevention procedures.
Hands on experience with GRC tools such as Archer, AuditBoard, ProcessUnity, OneTrust and ServiceNow etc..
Proven ability to guide or train others control frameworks and/or control assessments processes using COBIT, UCF, NIST, CIS 18 and ISO 27001
Extremely detail oriented with excellent organizational and planning skills and equally proficient oral and written communication acumen

Behavioral Core Competencies

Excellent written and verbal communication skills
Ability to work collaboratively with cross-functional teams.
Detail-oriented with strong analytical and problem-solving skills.
Leadership and communication skills, with the ability to inspire and influence cross-functional teams and senior stakeholders.

The Company is an equal employment opportunity employer.