Address
Form of workJob Purpose
The Compliance Coordinator supports the IDS compliance program within the Information Security organization. This support includes but is not limited to Sarbanes Oxley (SOX), SOC 2, ISO27001, NIST, questionnaires from 3rd parties, clients and partners assessing the Information Security Status of TechnipFMC. This position also serves as the Information Security representative for Audits and assists in risk identification working within the IDS Cyber Resilience and Risk Management program.
Job Description
Supporting the IDS organization on global compliance requirements and standards including SOX, SOC 2, ISO, NIST. Identifies gaps and areas for improvement in the IDS Compliance Program and provides recommendations on improvements and mitigation. Works as an SME by coordinating the development and improvement of standards, processes and procedures related to new and existing policies and information security objectives. Maintains metrics and key performance indicators to monitor the overall health and effectiveness of the IDS Compliance program. Analyzes information systems to ensure compliance with standards and policies. Assists in assessing compliance business and operational risks. Maintains the IDS General Controls (ITGCs). Designs all new IDS controls in accordance with the Information Security Standards and in collaboration with personnel in Internal Audit (IA) and or Integrated Internal Controls (IIC). Identify IDS control owners; as needed provides training related to the controls execution and testing. Updates the IDS Risk and Controls Matrix (RCM). For IDS General Controls, serves as the IDS liaison for all issues that involve coordination between Internal Auditors /Integrated Internal Controls personnel and IDS. Assists in completing customer questionnaires and assessments. As needed, serves as the IDS SME for Audits which includes: Provides guidance to the Internal and External Auditors, Coordinates or participates in meetings with IDS resources. For Internal Audit findings, reviews the remediation plan to validate the timeline and identify any gaps or other issues. Monitors the remediation process in collaboration with IDS, IIC and or IA. IDS Compliance Certifications.
You are meant for this job if:
5+ years supporting or auditing Information Security or Information Technology compliance programs. Knowledgeable about compliance regulations and concepts (e.g. Sarbanes-Oxley 404, PCAOB Audit Standards, PCI, GDPR, etc.). Knowledgeable about information security standards including ISO 27001 and the NIST Cybersecurity Framework. Knowledge of recognized IT process and quality frameworks such as ISO, COBIT, and ITIL. Experience with risk assessment methodologies. Experience in creating and tracking compliance metrics. Able to work effectively in a Global matrix-management environment. Strong interpersonal and organizational skills. Strong problem solving, analytical, and critical thinking skills. Advanced oral and written communication skills. Experience working within a Global or enterprise of similar scale. Ability to establish and maintain effective working relationships with team members and colleagues.
Additional Skills
Leadership Competencies
Being a global leader in the energy industry requires an inclusive and diverse environment. TechnipFMC promotes diversity, equity, and inclusion by ensuring equal opportunities to all ages, races, ethnicities, religions, sexual orientations, gender expressions, disabilities, or all other pluralities. We celebrate who you are and what you bring. Every voice matters and we encourage you to add to our culture.
TechnipFMC respects the rights and dignity of those it works with and promotes adherence to internationally recognized human rights principles for those in its value chain.
Learn more about TechnipFMC and find other open positions by visiting our Career Page.
Follow us on LinkedIn for company updates.
Date posted: Dec 13, 2023
Requisition number: 2426
The Compliance Coordinator supports the IDS compliance program within the Information Security organization. This support includes but is not limited to Sarbanes Oxley (SOX), SOC 2, ISO27001, NIST, questionnaires from 3rd parties, clients and partners assessing the Information Security Status of TechnipFMC. This position also serves as the Information Security representative for Audits and assists in risk identification working within the IDS Cyber Resilience and Risk Management program.
Job Description
Supporting the IDS organization on global compliance requirements and standards including SOX, SOC 2, ISO, NIST. Identifies gaps and areas for improvement in the IDS Compliance Program and provides recommendations on improvements and mitigation. Works as an SME by coordinating the development and improvement of standards, processes and procedures related to new and existing policies and information security objectives. Maintains metrics and key performance indicators to monitor the overall health and effectiveness of the IDS Compliance program. Analyzes information systems to ensure compliance with standards and policies. Assists in assessing compliance business and operational risks. Maintains the IDS General Controls (ITGCs). Designs all new IDS controls in accordance with the Information Security Standards and in collaboration with personnel in Internal Audit (IA) and or Integrated Internal Controls (IIC). Identify IDS control owners; as needed provides training related to the controls execution and testing. Updates the IDS Risk and Controls Matrix (RCM). For IDS General Controls, serves as the IDS liaison for all issues that involve coordination between Internal Auditors /Integrated Internal Controls personnel and IDS. Assists in completing customer questionnaires and assessments. As needed, serves as the IDS SME for Audits which includes: Provides guidance to the Internal and External Auditors, Coordinates or participates in meetings with IDS resources. For Internal Audit findings, reviews the remediation plan to validate the timeline and identify any gaps or other issues. Monitors the remediation process in collaboration with IDS, IIC and or IA. IDS Compliance Certifications.
You are meant for this job if:
5+ years supporting or auditing Information Security or Information Technology compliance programs. Knowledgeable about compliance regulations and concepts (e.g. Sarbanes-Oxley 404, PCAOB Audit Standards, PCI, GDPR, etc.). Knowledgeable about information security standards including ISO 27001 and the NIST Cybersecurity Framework. Knowledge of recognized IT process and quality frameworks such as ISO, COBIT, and ITIL. Experience with risk assessment methodologies. Experience in creating and tracking compliance metrics. Able to work effectively in a Global matrix-management environment. Strong interpersonal and organizational skills. Strong problem solving, analytical, and critical thinking skills. Advanced oral and written communication skills. Experience working within a Global or enterprise of similar scale. Ability to establish and maintain effective working relationships with team members and colleagues.
Additional Skills
Leadership Competencies
Being a global leader in the energy industry requires an inclusive and diverse environment. TechnipFMC promotes diversity, equity, and inclusion by ensuring equal opportunities to all ages, races, ethnicities, religions, sexual orientations, gender expressions, disabilities, or all other pluralities. We celebrate who you are and what you bring. Every voice matters and we encourage you to add to our culture.
TechnipFMC respects the rights and dignity of those it works with and promotes adherence to internationally recognized human rights principles for those in its value chain.
Learn more about TechnipFMC and find other open positions by visiting our Career Page.
Follow us on LinkedIn for company updates.
Date posted: Dec 13, 2023
Requisition number: 2426
