Risk and Compliance Analyst

About the Role

The Network Risk and Compliance Analyst position is within the Production Assurance-Risk and Compliance Team. This team is responsible for proactively identifying and managing risks, ensuring oversight and accuracy of audit and regulatory responses, and remediation plans.

Key Responsibilities

• Develop and manage monitoring activities to ensure compliance with Information Security and Technology regulatory requirements and internal policies and standards.
• Identify, develop, and maintain key risk indicators to track and ensure compliance with established policies and standards.
• Conduct targeted reviews to identify risks, opportunities, and areas for improvement.
• Proactively identify and report Information Security and Technology compliance risks.
• Ensure risks are effectively identified, quantified, prioritized, communicated, and managed, including recommendations for risk mitigation and identifying the root cause/key themes.
• Effectively communicate findings and recommendations to management in a detailed and organized format/process via presentations to stakeholders and senior management.
• Support Audit, Regulatory, and Third-Part audits/risk assessments.
• Development of formal responses to Audit and Regulatory inquiries or assessments, which may include documentation gathering, drafting of documents, and researching past activity and reports.
• Centralize compliance responses/data to improve audit response time and create consistent responses across teams.
• Interact with Auditors and Regulators as needed.
• Develop and conduct ongoing risk and compliance training and education.

Requirements & Tech Stack

• Bachelor’s degree in Computer Science, Cyber Security, Information Security, Information Systems Management, Information Technology Auditing, or a related relevant field.
• Strong technical background to communicate effectively with Network Engineers.
• Experience in leading projects, preferably global projects.
• Experience with audits and/or compliance assessments/monitoring.
• PMI, CISSP, CISM, CISA a plus.
• Ability to operate in a fast-paced global environment.
• Ability to work under pressure, meet tight deadlines, and embrace change.
• Ability to communicate clearly to various levels of management (including executive management), across various business functions (including engineering).