Sr. Technology Risk and Controls Analyst

Skyward Specialty

1d•$75,000 - $105,000•Remote

About The Position

The Sr. Technology Risk and Controls Analyst plays a crucial role in ensuring the overall operational effectiveness of an organization's IT systems and processes. This position is responsible for supporting the development, implementation, and monitoring of IT controls to safeguard assets and comply with policies and regulations.

Requirements

Bachelor's degree in Information Technology, Computer Science, or a related field preferred.
CRISC, CISA, or other relevant technology risk management certifications.
Experience with IT Risk & Control Frameworks (e.g., COBIT, COSO, ISO 31000).
Experience with SOX audits & PCAOB requirements.
Strong analytical skills and attention to detail are required.
Excellent communication and interpersonal skills required.
Ability to work independently and as part of a team required.
Experience with audit processes and risk management preferred.

Responsibilities

Program Development Identify, implement, and manage processes to ensure Technology Risk & Control program efficacy.
Risk Assessment and Management: Conduct risk assessments to identify potential control gaps within IT systems & processes. Collaborate with IT teams to identify, analyze, and evaluate risks. Develop treatment plans to manage risk.
Controls Development and Implementation: Design and establish IT controls following industry standards and best practices. Develop and implement policies and procedures to ensure effective IT control environments.
Compliance and Audit: Ensure IT compliance with regulatory requirements and organizational policies. Fulfill audit artifact requests by preparing, reviewing control effectiveness evidence.
Continuous Monitoring: Implement tools and practices for continuous monitoring of IT systems and controls. Analyze data to proactively identify and resolve issues.
Collaboration and Communication: Work closely with cross-functional teams to ensure alignment on IT control objectives. Communicate effectively about control processes, changes, and improvements to stakeholders.