Risk Analyst (Audit, Risk, Information Security)

Description:
Position Summary

• The Project Analyst (ERP Exception Process Analyst) handles executing the process to document risk exception requests related to vulnerabilities and not permitted technology.
• The role will work with our risk partners to review for approval (updated as needed) within defined SLAs, and work to secure executive approvals.

Other key duties include entry of exception requests into required system, regular reviews/updates of team processes and procedure documents, and periodic testing to insure processes are being followed by the team.
Responsibilities:

• Manage pipeline of exception requests, ensuring proper review and approvals are done at each step as needed and within SLA.
• Chair weekly review meetings, preparing agendas and meeting notes per process requirements.
• Enter assigned exception requests into tracking system.
• Prepare executive reporting as needed for approvals and tracking of approved timelines.
• Manage executive review calendar, aid in preparation of review materials and agenda.
• Maintain process and procedure documentation, periodic review to ensure team adherence.
• Engage with partners to be aware of upcoming process changes and impact to internal procedures.
• Track action step completion status and exception expiration to ensure teams meet their committed dates.
• Train/educate application teams on exception process.

Required Skills

• Prior Risk or Audit Experience
• Knowledge of Information Security and controls, risk management and documentation.
• Excellent MS-Office skills (including PowerPoint (for presentations) and Excel (for manipulating large amounts of data with pivot tables and charts. Must be able to tell the succinct story of a large data set.
• Diligent, action oriented, and organized with strong attention to detail.
• Able to interact effectively with all levels of the organization from development teams writing up exception requests through executives reviewing for approvals.
• Basic to mid-level infrastructure of Operating Systems, Databases and Middleware products.
• Ability to build partnerships and influence others to perform required actions.
• Skilled in handling multiple priorities with tight deadlines in a challenging environment
• Work within a team but also can work for extended period in standalone roles to meet targets and deadlines.
• Ability to analyze details and shape results into conclusions and recommendations for management.

Desired Skills

• Direct experience documenting security risks and action plans for remediation.
• Tableau Reporting

As an equal opportunity employer, ICONMA prides itself on creating an employment environment that supports and encourages the abilities of all persons regardless of race, color, gender, age, sexual orientation, citizenship, or disability.