Berkley Technology Services (BTS) is hiring a Sr. IT GRC Analyst. They will report to the Director, IT Regulatory and Compliance and will be located in either Urbandale, Iowa, Wilmington, Delaware, Irving, Texas, Manassas, Virginia or remote may be available for the right candidate. This is an exciting role for an IT GRC analyst to be part of a global Fortune 400 (W.R. Berkley) Governance Risk and Compliance program’s operational activities. Working in concert with other Compliance, Information Technology, Information Security, and Business Unit functions, the Sr. IT GRC Analyst will ensure our overall control environment and corresponding activities/controls are aligned to our policies, standards and/or relevant regulations. This role will focus on control assessments, from both a design and operating effectiveness perspective, against processes, applications/systems, infrastructure, etc. to ensure compliance. The Sr. IT GRC Analyst will document control assessments and other reviews by gathering evidence and documentation of workpapers. Additionally, this role will have input into risk assessments and issue documentation/tracking to support the full lifecycle of GRC operations. On our team, you’ll actively engage with technical and compliance/legal teams, business units to perform and advance IT GRC operations. To do this, you’ll be hands-on and help drive processes and procedures with other IT GRC professionals dedicated to the mission and vision of Berkley IT GRC operations.
- Act as a Liaison and mature our IT SOX process with WR Berkley operating units and external audit. Managing the IT SOX full life cycle of the Document request lists (DRLS, scheduling and participating in audit walkthroughs,
- Stay up to date with changes in IT SOX requirements and industry best practices related to IT SOX compliance.
- Manage and/or coordinate ITS SOX issues and findings across all compliance related activities are documented and tracked for remediation, with direct involvement by either facilitation of discussions, or by being directly involved in the process.
- Oversee and enhance quarterly IT Compliance Certification processes.
- Perform reviews of internal IT and Security controls by performing control and risk assessments of processes, procedures, system configurations, etc. to document control effectiveness from both a design and operating effectiveness perspective.
- Highly motivated with Strong project management skills, organizational, oral and written communications skills.
- Proactive starter.
