it audit analyst

<div></div><div><div><div><div><div><div><div>King Of Prussia, PA, US, 19406
</div></div></div></div><div><div><div><div>Workplace Environment: Hybrid
</div></div></div></div><div><div><div><div>Company: UGI Corporation
</div></div></div></div><div><div><div><div>Requisition Number: 29039
UGI Corporation (NYSE: UGI) is a holding company that distributes and markets energy products and services through our subsidiaries and the company&rsquo;s common stock is a balanced growth and income investment. UGI Corporation has paid common dividends for more than 135 consecutive years. 

In addition to a challenging career and competitive compensation, our employees enjoy: 

Generous and Family-friendly Health &amp; Welfare Benefits Including:
<ul><li>Medical, Vision, and Dental Plans</li><li>Optional Health Savings Account</li><li>Optional Dependent Care Savings Account</li><li>Paid Maternity/Paternity Leave</li><li>Work from home policy</li><li>Employee Assistance Program</li></ul> 

Additional Benefits Include:
<ul><li>401K with a generous company match</li><li>Tuition Reimbursement</li><li>Assistance with Professional Credentialing</li><li>Referral Bonuses</li><li>Employee Discount Programs</li></ul>

Job Summary-

The Senior Internal Controls Analyst - ITGC plays a critical role in ensuring the organization's adherence to SOX requirements and mitigating IT-related risks to financial reporting. This role supports the design, execution, and testing of IT general controls across all UGI family of companies, ensuring that controls are properly implemented and operating effectively and efficiently. The SOX Compliance Analyst - ITGC will collaborate with IT and business stakeholders to create and update SOX documentation, including IT process narratives, system flowcharts, and IT control matrices, while also assisting with user access reviews and IT vendor SOC reports assessment. They are responsible for executing IT management control activities, identifying opportunities for improvements and automation, and identifying process enhancements to strengthen the IT control environment while gaining efficiency. Additionally, this role provides critical support during internal and external IT audits and contributes to cross-functional projects by offering expertise on IT controls and SOX compliance. With existing knowledge of IT general controls, cybersecurity frameworks, and COBIT, coupled with technical and communication skills, the SOX Compliance Analyst - ITGC will assist in continually improving the company's IT control environment and ensure continuous compliance throughout the fiscal year. 


Essential Functions-
<ul>
<li>Obtain thorough expertise with IT processes and systems coupled with understanding of applicable IT-related financial misstatement risk. Evaluate the IT controls framework across all UGI companies. Ensure controls are properly designed and operating efficiently and effectively to mitigate identified technology and financial reporting risks.</li>
<li>Lead the execution/review of IT general controls, such as user access reviews, privileged access reviews, and others as assigned. Lead the annual SOC 1 type II report evaluations. Work closely with the IT team to ensure that all IT controls are efficiently and effectively implemented, and necessary evidence is auditable and available. Serve as primary liaison for internal and external IT audit teams.</li>
<li>Design, create and execute IT control monitoring activities. Continually improve efficiency and effectiveness of the monitoring activities and documentation.</li>
<li>Collaborate with IT departments and system administrators to gather information and facilitate the execution of IT controls. Communicate clearly and effectively with team members, IT control owners, and external auditors to ensure alignment and transparency.</li>
<li>Proactively consult on the development of appropriate IT general controls or processes with management, internal or external auditors, or consultants during major IT implementations and new business functionality projects.</li>
<li>Support the maintenance of ITGC SOX documentation, including IT process narratives and system flowcharts. Coordinate with IT SMEs to review the risk and control. Assist with the overall evaluation of the risks within IT processes and make suggestions for mitigating risks more effectively and/or more efficiently.</li></ul> 


Skills-
<ul>
<li>Collaboration: Strong collaboration skills to work closely with IT departments and team members on SOX compliance activities.</li>
<li>Problem-Solving/Critical Thinking: Advanced problem-solving skills to assist in resolving IT control deficiencies. Assist in developing and implementing mitigation plans, as well as ensuring timely execution of IT remediation plans.</li>
<li>Organization: Excellent organizational skills to manage multiple IT control testing tasks and ensure thorough documentation of testing results, enable daily status tracking.</li>
<li>Communication: Strong communication skills (written/verbal) for documenting IT control findings, drafting technical reports, and presenting results to team members and management. Technical skills in creating presentations to pitch, train and/or summarize results pertaining to IT SOX compliance.</li>
<li>Training: Assist in training peers and junior team members by documenting procedures related to executing specific ITGC management review controls.</li>
<li>Technical Skills Advanced skills in database querying (SQL), PowerShell, IT security concepts, and system administration principles. Expertise in enterprise systems like Active Directory, ERP systems, change management tools, and IT service management platforms is a plus.</li></ul> 


Competencies-
<ul>
<li>Attention to Detail: Can follow complex methodologies to execute procedures completely and accurately. Adheres to corporate IPE policy with exceptional accuracy and completeness.</li>
<li>IT Control Framework Expertise: Solid knowledge of COBIT Framework, ISO 27001, or NIST and how they apply to daily SOX compliance activities.</li>
<li>Accountability: Takes ownership of tracking their work and providing regular, clear updates to management on project status, risks, and any issues.</li>
<li>Time Management: Effectively manage time to balance multiple IT control execution priorities and meet agreed upon deadlines within the SOX compliance function.</li></ul> 


Education and Experience-
<ul>
<li>Bachelor's degree in information systems, computer science, cybersecurity, or related field.</li>
<li>Professional certification in IT audit or security (CISA, CISSP, or equivalent).</li>
<li>Minimum of 5 years of experience in IT controls, IT audit, or IT compliance with a focus on SOX ITGC testing required.</li>
<li>Of the 5 years&rsquo; total experience, a minimum of 3 years' experience in an external IT audit or IT consulting environment with a focus on SOX compliance is preferred.</li>
</ul>
#LI-Hybrid
All offers of employment are contingent upon the successful completion of a background check and drug screen, subject to applicable laws and regulations.
UGI Corporation is an Equal Opportunity Employer. The Company does not discriminate on the basis of race, color, sex, national origin, disability, age, gender identity, sexual orientation, veteran status, or any other legally protected class in its practices. 
</div></div></div></div> 
Nearest Major Market: Philadelphia</div></div></div><div></div>

Sr SOX Compliance Analyst - ITGC

CardWorks Servicing

<div>Join our team - and take the next step in achieving a fulfilling career!
What We Do
At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.
Who We Are<div>
CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.</div>
CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.
Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.
Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.
Position Summary:
The Senior Analyst, IT Risk is responsible for supporting and enhancing the organization&rsquo;s technology risk management, audit coordination, and IT control framework. This role partners closely with Internal Audit, Compliance, Technology, and business stakeholders to ensure regulatory readiness, effective control operation, and timely remediation of findings. The ideal candidate has a strong understanding of technology risks, audit processes, IT general controls, and information security principles.
Essential Functions:
Audit &amp; Regulatory Coordination<ul><li>
Coordinate audit preparation activities&mdash;including scheduling, evidence collection, and stakeholder communication&mdash;for internal audits and regulatory examinations (e.g., FDIC, SOX, SOC, and other technology-focused reviews).</li><li>
Serve as the primary liaison between Internal Audit, IT, and Compliance teams to ensure timely and accurate responses to audit inquiries.</li><li>
Oversee and track remediation activities; validate completion and effectiveness of corrective actions for technology-related audit findings.</li><li>
Participate in readiness assessments and pre-audit walkthroughs to identify issues before formal reviews begin.</li></ul>
Technology Risk Assessment &amp; Control Evaluation<ul><li>
Conduct comprehensive Technology Risk Assessments, identifying inherent and residual risks across infrastructure, applications, security, and cloud environments.</li><li>
Evaluate the design and operating effectiveness of technology controls, including IT General Controls (ITGCs), logical access, change management, operations, and security controls.</li><li>
Perform independent control testing to verify compliance with policies, standards, and regulatory requirements.</li><li>
Advise IT leadership on control gaps, deficiencies, risks, and recommended remediation strategies.</li></ul>
Governance, Risk, and Compliance (GRC) Support<ul><li>
Provide risk insights for new initiatives, technology implementations, cloud migrations, and major IT projects.</li><li>
Support enhancements to the IT risk management framework, control library, and GRC tooling.</li><li>
Monitor emerging technology risks and collaborate with stakeholders to develop mitigating controls.</li><li>
Contribute to the development and maintenance of IT policies, standards, and procedures.</li></ul>
Education and Experience:
Required:<ul><li>
Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or related field (or equivalent experience).</li><li>
5-10+ years of experience in IT risk, audit, information security, or technology governance.</li><li>
Strong knowledge of IT controls frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements (SOX, FFIEC, SOC, etc.).</li><li>
Experience working with audit functions and responding to regulatory reviews.</li><li>
Ability to analyze control gaps and articulate risks clearly to technical and non-technical stakeholders.</li></ul>
Preferred:<ul><li>
Professional certifications such as CISA, CRISC, CISSP, CIA, or similar.</li><li>
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, MetricStream).</li><li>
Familiarity with cloud technologies (AWS, Azure, GCP) and related risk assessments.</li><li>
Prior first line Technology experience.</li></ul>
Summary of Qualifications:<ul><li>
Strong analytical and problem-solving skills</li><li>
Excellent communication and documentation abilities</li><li>
Detail-oriented with strong organizational skills</li><li>
Ability to manage multiple concurrent audits and priorities</li><li>
Collaborative mindset with the ability to work across IT, audit, and compliance functions</li><li>
Occasional travel may be required</li></ul>
Ideally, the qualified candidate will work at the following location: Woodbury, NY. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.
The salary range for this position, if located in NY Metro/NY State is $122,309 to $135,899. However, please note that the salary range will vary for other geographic areas.
#INDHP
Our Employee Value Proposition<ul><li>
Competitive Pay, including a Bonus Target or Variable Pay Incentive Program</li><li>
Benefits Package -Medical, Dental, and Vision (plus much more)</li><li>
401(k) Plan with Company Match</li><li>
Short- &amp; Long-Term Disability</li><li>
Wellness Programs</li><li>
Group Life and AD&amp;D Insurance</li><li>
Paid Vacation, Sick Days and bank Holidays</li><li>
Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition</li></ul>
We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.
We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.</div>

Senior Analyst, IT Risk

AAA The Auto Club Group

<div>It&rsquo;s a great time to join AAA The Auto Club Group!
JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD
Job Type:
Full time 
<div><div>Exempt/Non Exempt: 
</div></div>Salary
Job Description: 
 
 
IT Risk Analyst &ndash; The Auto Club Group
What you will do:
The IT Risk Analyst assists with the execution and maintenance of the IT risk management program, including the evaluation and mitigation of information technology risks across the organization and supporting leading risk teammates as needed.
Primary Duties and Responsibilities:
<ul><li>Contribute to documentation of IT risk management policies, standards, and processes
</li><li>Help maintain alignment with company objectives and regulatory requirements
</li><li>Perform analysis of key IT Risk performance/risk indicators for management
</li><li>Support internal and external IT risk assessments as dictated by the senior team members
</li><li>Contribute to IT risk appetites, tolerances, and mitigation plans related to IT systems as dictated by the senior team members
</li><li>Support monitoring activities of 1st line access reviews for general users, privileged users, and passwords
</li><li>Coordinate with IT to maintain an IT risk register, control library, and assign risk ownership
</li><li>Support regulatory readiness efforts and governance assessments for the information technology controls environment
</li><li>Research industry trends, emerging threats, and evolving regulations
</li><li>Contribute to training company stakeholders on IT risk
</li><li>Contribute to Enterprise Risk Management team&rsquo;s reporting and processes (e.g. key risks, watch list risks, AI Systems Program)
</li></ul>Supervisory Responsibilities:
None
How you will benefit:
IT Risk Analyst will earn a competitive salary of $65,000 - $80,000 annually with annual bonus potential based on performance.
Excellent and comprehensive benefits packages are just another reason to work for the Auto Club Group. Benefits include:
<ul><li>401k Match
</li><li>Medical
</li><li>Dental
</li><li>Vision
</li><li>PTO
</li><li>Paid Holidays
</li><li>Tuition Reimbursement
</li></ul>We&rsquo;re looking for candidates who:
Required Qualifications:
Education:
<ul><li>Bachelor&rsquo;s degree in information technology, cybersecurity, risk management, computer science, or related area
</li></ul>Experience:
<ul><li>2-4 years of experience in IT risk management, IT audit, cybersecurity, or related roles
</li></ul>Knowledge of:
<ul><li>Familiarity with property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
</li><li>Foundational knowledge of Internal controls and core IT technologies and processes (e.g. network systems, operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
</li><li>Familiarity with risk assessment methodologies and GRC tools
</li></ul>Skills:
<ul><li>Good written and verbal communication skills
</li><li>Attention to detail with the ability to follow processes and standards
</li><li>Proficiency in Microsoft Office products
</li><li>Work collaboratively and manage competing priorities, especially when translating expectations between third line or external audit assurance groups and first line risk and controls owners within IT
</li><li>Ensure strong relationship management and value demonstration to a wide set of stakeholders
</li><li>Identify, assess, and prioritize IT risks
</li><li>Multitask and work closely and effectively with other employees
</li><li>High degree of attention to detail and organization
</li><li>Maintain a high volume of work with few mistakes or delays
</li></ul>Preferred Qualifications:
Education:
<ul><li>Master&rsquo;s degree in Information Technology, Cybersecurity, Risk Management, Computer Science, or related area; MBA also considered
</li><li>One or more of the following professional certifications such as CISA, CISM, CRISC, or CISSP are strongly preferred
</li></ul>Prior Experience with:
<ul><li>IT risk frameworks (e.g. NIST CSF, COBIT) in the insurance or financial services industry
</li><li>IT systems and technologies including ServiceNow, Saviynt, Workday, SAP, Salesforce, Guidewire
</li><li>IT risk management for emerging technologies such as AI, machine learning, cloud computing, process automation, data analytics, etc.
</li></ul>Work Environment
This is a hybrid work arrangement (time spent in office and remote). Depending on the employee's role and leadership's assessment, some employees will come in to an ACG facility on a weekly basis, a monthly basis, or on an &quot;as needed&quot; basis for key meetings and collaborative activities. Most employees will be required to come into the office, at a minimum, for important departmental meetings or team building events.
Who We Are
Become a part of something bigger.
The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.
By continuing to invest in more advanced technology, pursuing innovative products, and hiring a highly skilled workforce, AAA continues to build upon its heritage of providing quality service and helping our members enjoy life&rsquo;s journey through insurance, travel, financial services, and roadside assistance.
And when you join our team, one of the first things you&rsquo;ll notice is that same, whole-hearted, enthusiastic advocacy for each other.
We have positions available for every walk of life! AAA prides itself on creating an inclusive and welcoming environment of diverse backgrounds, experiences, and viewpoints, realizing our differences make us stronger.
To learn more about AAA The Auto Club Group visit www.aaa.com
Important Note:
ACG&rsquo;s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.
The above statements describe the principal and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfill these requirements.
The Auto Club Group, and all its affiliated companies, is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.
Regular and reliable attendance is essential for the function of this job.
AAA The Auto Club Group is committed to providing a safe workplace. Every applicant offered employment within The Auto Club Group will be required to consent to a background and drug screen based on the requirements of the position.</div>

IT Risk Analyst

Compeer Financial

<div><div>Empowered to live. Inspired to work.
 
Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally.

How we support you:
<ul>
<li>Hybrid model &ndash; up to 50% work from home</li>
<li>Flexible schedules including ample flexibility in the summer months</li>
<li>Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match)</li>
<li>Benefits: medical, dental, vision, HSA/FSA, life &amp; AD&amp;D insurance, short-term and long-term disability, wellness program &amp; EAP</li>
<li>Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off</li>
<li>Learning and development programs</li>
<li>Mentorship programs</li>
<li>Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.)</li>
<li>Professional membership/certification reimbursement and more!</li>
</ul>
Casual/seasonal &amp; intern team members are not eligible for benefits except for state-mandated programs.

To learn more about Compeer Financial visit www.compeer.com/careers.</div>
Where you will work: This position offers a hybrid work option up to 50% remote and is open to any Compeer office location in Illinois, Minnesota and Wisconsin.

The contributions you will make:

This position is responsible for partnering with leadership and stakeholders to identify and assesses key risks and controls for Information Technology (IT). You will perform duties through an Internal Audit framework under the oversight of the Director Internal Audit and Vice President Audit Services. Completes standard to moderately complex IT audits and assignments.

A typical day:
<ul>
<li>Determines scope of review (i.e. critical systems, platforms and interfaces) in conjunction with the Director Internal Audit and Principal IT Auditor(s).</li>
<li>Performs process-specific risk assessments around key IT components supporting those processes with moderate feedback.</li>
<li>Reviews and evaluates the organization's less complex system of IT internal controls and assesses control operating effectiveness, as well as reviews compliance with the organization's policies, procedures and regulations.</li>
<li>Leverages data analytics and other advanced testing techniques.</li>
<li>Makes recommendations on how to design, implement, improve or enhance standard to moderately complex IT internal controls, governance and operational efficiencies.</li>
<li>Drafts clear, accurate, and well-supported IT audit reports that communicate risks, control gaps, and recommendations to management and governance bodies.</li>
<li>Assists in presenting standard to moderately complex audit report results and document process for senior leadership and the Audit &amp; Finance Committee.</li>
</ul>
The skills and experience we prefer you have:
<ul>
<li>Bachelor's degree in information systems, accounting, finance, or related field or an equivalent combination of education and experience sufficient to perform the essential functions of the job.</li>
<li>Expert level experience working as an IT internal auditor within a financial institution.</li>
<li>Preferred certifications include Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), and Certified Internal Auditor (CIA).</li>
<li>Intermediate knowledge of information technology, information security and data management methodologies and frameworks.</li>
<li>Intermediate knowledge of process risk assessment methodology.</li>
<li>Intermediate knowledge of IT auditing processes and control design, implementation and testing.</li>
<li>Knowledge of financial operations, financial reporting, including Generally Accepted Accounting Principles and Generally Accepted Auditing Standards.</li>
</ul>
How we will take care of you:

Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits.<div>
Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time.

Click here to view federal employment laws applicable for applicants.</div></div>

Senior Internal Auditor IT

MissionSquare Retirement

<div>Join a great place to work with MissionSquare, a financial services corporation with approximately $79 billion in assets under management and administration and over 600 employees. Founded in 1972, MissionSquare is dedicated to the retirement needs of public sector employees. We focus on delivering results-oriented retirement and retiree health savings plans, education, investment options, personalized guidance, and related services to public sector participants in more than 9,200 plans and nearly 2 million participant accounts. We strive to make the administration of retirement programs as easy and cost-effective as possible. We have an extraordinary talent base and invite you to consider joining MissionSquare.
$0.00 - $0.00
Position Title: Internal Auditor &ndash; Internal Auditor &ndash; IT
Reports to Internal Audit Manager &ndash; Info Tech
MissionSquare&rsquo;s Internal Audit Division seeks a self-motivated individual seeking comprehensive IT and Information Security audit work experience. This is a temporary job opportunity at our headquarters located in Washington, DC, just two blocks from Union Station, where you can catch the Metro or a commuter train (VRE or MARC) beginning mid-June and ending in August 2026.
The company is currently operating in a hybrid model, and the candidate will be required to come into the office once a week, on Tuesday.
<div>Essential Job Functions:
</div><ul><li>Performing audit procedures to assess the Information Technology (IT) and Information Security (IS) control environment relating primarily, but not exclusively, to logical access and change management
</li><li>Preparing walkthrough narratives and flowcharts and assisting with risk assessments. Additionally, the candidate would be responsible for performing any research necessary to gain a better understanding of the underlying business processes, technology, security, legal and regulatory requirements, and the key risks associated therewith.
</li><li>Working with external auditors, from a big four audit firm to complete testing of IT General Controls in support of an SSAE 18 (SOC 1) report.
</li><li>Communicating &amp; validating audit results with clients, preparing thorough written reports and providing oral presentations for management at various levels of the corporation.
</li></ul><div>Required Skills/Knowledge/Experience:
</div><ul><li>The candidate should be an upperclassman, recent graduate or graduate student interested in Information Technology and Security audit and compliance, majoring in a corresponding field.
</li><li>Excellent oral and written communication skills
</li><li>Strong analytical skills and proficiency in working with MS Office
</li></ul><div>Number of years of experience: None to one year
Compensation:
$25 per hour for Undergraduate / $30 per hour for Graduate Student
Technical/Functional Skills:
</div>Required
Preferred
Bachelor&rsquo;s degree in accounting, cyber security, or management information systems
Audit and compliance background and experience
Excellent oral and written communication skills
Strong analytics skills
Proficiency in working with MS Office
Ability to work independently as well as in teams
The following Core Competencies are required for all positions: Customer Focus, Integrity &amp; Trust, and Drive for Results.
Required
Preferred
The candidate should demonstrate customer focus, Integrity &amp; Trust and Drive for Results
Familiarity with data analysis tools such as Power BI
Ability to meet the deadlines
Proactive and taking initiatives
Minimum education preferred:
 High School or equivalent experience
 BA/BS or equivalent experience (pursing undergraduate degree is acceptable)
Note: Nothing in this job description restricts management&rsquo;s right to assign or reassign duties and responsibilities to this job at any time.
 To benefit your career and support your wellbeing, we offer:
<ul><li>Competitive Total Rewards package , including base pay, incentive programs, benefits, and a 401(k) plan with matching contributions
</li><li>Flexible and hybrid work schedules to support work-life balance
</li><li>Tuition reimbursement to support continued education
</li><li>Professional and career development opportunities , including courses and certifications
</li><li>Comprehensive wellness programs promoting physical, mental, and emotional health
</li><li>Volunteerism initiatives to encourage community engagement</li></ul> 
Equal Employment Opportunity
As a company, MissionSquare is an Equal Opportunity Employer. We strive to create an environment that reflects the value and diversity of our employees and fosters respect among them. We believe that talent from diverse backgrounds will further enhance our ability, and mission, to serve those who serve their communities.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or any other protected classifications under any applicable law. 
 
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.</div>

Contract Temporary

Tire Rack

<div>Sr. Information Security GRC Analyst

Location: Tire Rack &ndash; South Bend, IN (On-Site) 
Department: Information Security

Employment Type: Full-Time 
Salary Range: $115,000-$125,000 annually 


About the Role

Tire Rack is seeking a Senior Information Security GRC Analyst to support and advance our Information Security Governance, Risk, and Compliance (GRC) program

.

In this role, you will assess and strengthen IT and security controls across the organization while ensuring alignment with regulatory, statutory, and industry security standards including ISO/IEC 27001:2022, PCI DSS, and internal security policies. 


This position works closely with IT teams, business leaders, and audit stakeholders to identify risk exposures, strengthen control frameworks, support audit readiness, and drive continuous improvement in Tire Rack&rsquo;s overall security posture. 


This role requires a strong mix of technical understanding, risk assessment expertise, and the ability to translate compliance requirements into practical, business-aligned security controls. 


At Tire Rack, we operate with the values of IOOGA &mdash; Integrity, Our People, Our Customers, Growth, and Attitude. 


What You'll Do 


Governance, Risk &amp; Compliance Leadership
<ul><li>
Advise IT and business stakeholders on governance, risk, and compliance requirements by interpreting regulatory, statutory, and security standards and translating them into actionable control recommendations.</li><li>
Lead and support the organization&rsquo;s information security risk management program, including risk identification, assessment, documentation, and monitoring mitigation strategies.</li><li>
Evaluate technology risks and recommend practical mitigation strategies aligned with business objectives.</li></ul>

Controls &amp; Compliance
<ul><li>
Develop and maintain GRC program documentation including:</li><li><ul><li>
Security policies</li><li>
Standards and procedures</li><li>
Risk registers</li><li>
Control inventories</li><li>
Evidence repositories</li></ul>
</li><li>Strengthen internal security controls by identifying opportunities to improve standardization, documentation, and compliance alignment.</li><li>
Define and communicate control expectations, testing procedures, and audit evidence requirements across teams.</li></ul>

Audit &amp; Testing
<ul><li>
Coordinate internal and external audits, including planning, evidence collection, stakeholder coordination, and remediation tracking.</li><li>
Execute security control testing by:</li><li><ul><li>
Defining scope</li><li>
Reviewing and validating evidence</li><li>
Documenting results</li><li>
Identifying deficiencies</li><li>
Tracking remediation through resolution.</li></ul>
</li><li>Manage compliance findings, corrective actions, and risk acceptance documentation.</li></ul> 


Program Improvement
<ul><li>
Support security initiatives and technology projects by embedding governance, risk, and compliance practices into delivery.</li><li>
Track program metrics, audit results, and compliance trends to improve security maturity over time.</li><li>
Provide recommendations to strengthen Tire Rack&rsquo;s overall security and compliance framework.</li><li>
Perform other duties as assigned in support of the Information Security and Technology organization.</li></ul>

What We're Looking For

We are looking for a security professional who brings both technical understanding and risk management expertise while partnering effectively across teams. 


Required Experience
<ul><li>
5&ndash;7 years of experience in IT, cybersecurity, risk management, audit, or compliance roles.</li><li>
Strong knowledge of information security frameworks including:</li><li><ul><li>
ISO/IEC 27001</li><li>
PCI DSS</li><li>
Familiarity with GDPR concepts</li></ul>
</li><li>Understanding of IT environments, systems, and security controls across infrastructure, applications, and data environments.</li></ul>

Skills &amp; Competencies
<ul><li>
Strong analytical and problem-solving abilities with the capacity to identify trends, patterns, and control risks.</li><li>
Ability to evaluate control design and operational effectiveness.</li><li>
Excellent documentation, organization, and attention to detail.</li><li>
Strong communication skills with the ability to explain complex technical or compliance concepts to both technical and non-technical audiences.</li><li>
Ability to work independently while collaborating effectively with cross-functional stakeholders.</li></ul>

Required Certifications (One or more)

Candidates must possess one or more of the following professional certifications, or be able to obtain one within a reasonable period after hire:
<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CRISC (Certified in Risk and Information Systems Control)</li><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CompTIA Security+</li></ul>

Equivalent or comparable information security, audit, risk, or compliance certifications may also be considered. 


Education
<ul><li>
Bachelor&rsquo;s Degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.</li></ul>

Work Schedule

Work Days: 
Monday through Friday 
Occasional weekends may be required.

Work Hours: 
8:00 a.m. &ndash; 5:00 p.m. 
Additional hours may be required depending on project or audit needs. 


#HP</div>

Sr. Information Security GRC Analyst

DICETEK LLC

<div>Role Purpose
The System Analyst is responsible for analyzing, supporting, and improving the bank's business and technology systems by acting as a key link between business stakeholders, system managers, vendors, and IT teams.
The role focuses on requirements analysis, system documentation, issue resolution, change support, and governance, ensuring systems operate reliably, securely, and in compliance with the bank's policies and regulatory requirements. 
Key Responsibilities
System Analysis &amp; Support<ul><li>
Analyze business requirements and translate them into functional and system requirements.</li><li>
Support day‑to‑day system operations, including issue analysis, root‑cause identification, and coordination with technical teams and vendors.</li><li>
Act as a point of contact for system‑related queries, enhancements, and defect resolution.</li><li>
Ensure system changes and fixes align with approved requirements and business expectations.</li></ul> 
Requirements &amp; Documentation<ul><li>
Prepare and maintain functional specifications, process flows, impact assessments, and system documentation.</li><li>
Document system behaviors, integrations, dependencies, and data flows.</li><li>
Support change requests by performing impact analysis and effort estimation.</li></ul> 
Stakeholder &amp; Vendor Coordination<ul><li>
Work closely with business users, system owners, vendors, and internal IT teams to ensure timely resolution of issues.</li><li>
Coordinate with vendors for troubleshooting, fixes, and enhancements, ensuring adherence to SLAs and contractual commitments.</li><li>
Participate in meetings, workshops, and review sessions with stakeholders.</li></ul> 
Change, Risk &amp; Governance<ul><li>
Support ITIL‑based change management, including documentation, testing support, approvals, and post‑implementation reviews.</li><li>
Ensure system changes comply with ADCB policies, security standards, and audit requirements.</li><li>
Assist during internal and external audits by providing system documentation, evidence, and clarifications.</li></ul>
Testing &amp; Quality Assurance<ul><li>
Support UAT activities, including test case preparation, execution support, and defect tracking.</li><li>
Validate system changes and enhancements before production deployment.</li><li>
Ensure issues are tracked to closure and lessons learned are documented.</li></ul>
Key Skills &amp; Experience
Technical &amp; Functional Skills<ul><li>
Strong experience as a System Analyst / Business Systems Analyst in enterprise environments.</li><li>
Good understanding of application support, system integrations, and data flows.</li><li>
Familiarity with IT service management (ITIL) processes such as incident, problem, and change management.</li><li>
Ability to analyze logs, incidents, and system behavior to support troubleshooting.</li></ul>
Governance &amp; Compliance<ul><li>
Experience working in banking or regulated environments is preferred.</li><li>
Awareness of risk, audit, and compliance requirements impacting IT systems.</li><li>
Strong documentation and control mindset.</li></ul> 
Qualifications<ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, or related discipline.</li><li>
Relevant certifications (ITIL, Business Analysis, or similar) are an advantage.</li></ul></div>

IT System Analyst

Search 10000+ It audit analyst jobs near you this March. New roles added regularly across leading industries. Apply today.