it compliance analyst

The Church of Jesus Christ of Latter-day Saints

<div><p>The Information Security Risk and Compliance Analyst 2 is an entry 2 level professional position that works on assignment with clear instruction and supervision from leaders to leverage available tools and processes in the defense of applications, systems and networks. This position may also be assigned to help document and implement controls and practices that meet the Church&rsquo;s defined policies and standards for risk and compliance.
</p><p>This individual works with divine guidance to provide or support technology that furthers the mission of the Church and reflects the eternal impact of the gospel.
</p><p>We value early, mid and late-career candidates and encourage all applicants with the posted skills and abilities to apply.</p></div>
<br><div><p>As assigned, assist with the remediation of vulnerabilities and threats
</p><p>Assist in additional discovery and investigation under the direction of incident responders and/or security managers
</p><p>Review documentation and reports to identify gaps, vulnerabilities, and issues to be escalated for further evaluation
</p><p>Assist in the investigation and analysis of technology audit recommendations
</p><p>Assist in the clarification and documentation of identified problems for future recognition and remediation
</p><p>Knowledgeable and current in information security practices, trends and technologies</p></div>
<br><div><ul><li>Bachelor&rsquo;s degree in related field or equivalent professional experience
</li><li>One year of experience in security, privacy, business continuity, or compliance
<br>
<ul><li>Knowledge of security risk and/or compliance assessment
</li></ul></li><li>Good interpersonal and collaborative skills with ability to work effectively as part of a team
</li><li>Professional written and oral communication skills
</li><li>Detail-oriented with the proven ability to follow instructions
</li><li>Works well with others, especially those in complementary roles
</li><li>Ability to monitor and analyze operational reports and logs looking for irregularities and abnormal patterns
</li><li>Basic knowledge of IT organization patterns
</li><li>Demonstrated proficiency with MS Office, Excel, Word and PowerPoint
</li><li>This job operates in a professional office environment
</li><li>To successfully perform the essential functions of the job there may be physical requirements which need to be met such as sitting for long periods of time and using computer monitors/equipment
</li></ul><p>Preferred:
</p><ul><li>Significant Internship in security, privacy, business continuity, compliance or related area(s)
</li><li>One or more of the following certifications: GSEC, GCED, GCDA, Security+, Security Pro or equivalent</li></ul></div>
<br><div><div>Church employees find joy and satisfaction in using their unique talents and abilities to further the Lord&rsquo;s work. From the IT professional who develops an app that sends the gospel message worldwide, to the facilities manager who maintains our buildings&mdash; giving Church members places to worship, teach, learn, and receive sacred ordinances&mdash;our employees seek innovative ways to share the gospel of Jesus Christ with the world. They are literally working in His kingdom.
</div><div>Only members of the Church who are worthy of a temple recommend qualify for employment. Apart from this, the Church is an equal opportunity employer and does not discriminate in its employment decisions on any basis that would violate U.S. or local law.
</div><div>Qualified applicants will be considered for employment without regard to race, national origin, color, gender, pregnancy, marital status, age, disability, genetic information, veteran status, or other legally protected categories that apply to the Church. The Church will make reasonable accommodations for qualified individuals with known disabilities.</div></div>

IT Risk & Compliance Analyst 2

<div></div><div><div><div><div><div><div><div>King Of Prussia, PA, US, 19406
</div></div></div></div><div><div><div><div>Workplace Environment: Hybrid
</div></div></div></div><div><div><div><div>Company: UGI Corporation
</div></div></div></div><div><div><div><div><p>Requisition Number: 29039</p>
<p><b>UGI Corporation (NYSE: UGI) </b>is a holding company that distributes and markets energy products and services through our subsidiaries and the company&rsquo;s common stock is a balanced growth and income investment. UGI Corporation has paid common dividends for more than 135 consecutive years.</p><br>
<p></p>
<p>In addition to a challenging career and competitive compensation, our employees enjoy:</p><br>
<p></p>
<p><b>Generous and Family-friendly Health &amp; Welfare Benefits Including:</b></p>
<ul><li>Medical, Vision, and Dental Plans</li><li>Optional Health Savings Account</li><li>Optional Dependent Care Savings Account</li><li>Paid Maternity/Paternity Leave</li><li>Work from home policy</li><li>Employee Assistance Program</li></ul><br>
<p></p>
<p><b>Additional Benefits Include:</b></p>
<ul><li>401K with a generous company match</li><li>Tuition Reimbursement</li><li>Assistance with Professional Credentialing</li><li>Referral Bonuses</li><li>Employee Discount Programs</li></ul>
<p>
Job Summary-</p>
<p>
The Senior Internal Controls Analyst - ITGC plays a critical role in ensuring the organization's adherence to SOX requirements and mitigating IT-related risks to financial reporting. This role supports the design, execution, and testing of IT general controls across all UGI family of companies, ensuring that controls are properly implemented and operating effectively and efficiently. The SOX Compliance Analyst - ITGC will collaborate with IT and business stakeholders to create and update SOX documentation, including IT process narratives, system flowcharts, and IT control matrices, while also assisting with user access reviews and IT vendor SOC reports assessment. They are responsible for executing IT management control activities, identifying opportunities for improvements and automation, and identifying process enhancements to strengthen the IT control environment while gaining efficiency. Additionally, this role provides critical support during internal and external IT audits and contributes to cross-functional projects by offering expertise on IT controls and SOX compliance. With existing knowledge of IT general controls, cybersecurity frameworks, and COBIT, coupled with technical and communication skills, the SOX Compliance Analyst - ITGC will assist in continually improving the company's IT control environment and ensure continuous compliance throughout the fiscal year.</p><br>
<p></p>
<p>
Essential Functions-</p>
<ul>
<li>Obtain thorough expertise with IT processes and systems coupled with understanding of applicable IT-related financial misstatement risk. Evaluate the IT controls framework across all UGI companies. Ensure controls are properly designed and operating efficiently and effectively to mitigate identified technology and financial reporting risks.</li>
<li>Lead the execution/review of IT general controls, such as user access reviews, privileged access reviews, and others as assigned. Lead the annual SOC 1 type II report evaluations. Work closely with the IT team to ensure that all IT controls are efficiently and effectively implemented, and necessary evidence is auditable and available. Serve as primary liaison for internal and external IT audit teams.</li>
<li>Design, create and execute IT control monitoring activities. Continually improve efficiency and effectiveness of the monitoring activities and documentation.</li>
<li>Collaborate with IT departments and system administrators to gather information and facilitate the execution of IT controls. Communicate clearly and effectively with team members, IT control owners, and external auditors to ensure alignment and transparency.</li>
<li>Proactively consult on the development of appropriate IT general controls or processes with management, internal or external auditors, or consultants during major IT implementations and new business functionality projects.</li>
<li>Support the maintenance of ITGC SOX documentation, including IT process narratives and system flowcharts. Coordinate with IT SMEs to review the risk and control. Assist with the overall evaluation of the risks within IT processes and make suggestions for mitigating risks more effectively and/or more efficiently.</li></ul><br>
<p></p>
<p>
Skills-</p>
<ul>
<li><i>Collaboration: </i>Strong collaboration skills to work closely with IT departments and team members on SOX compliance activities.</li>
<li><i>Problem-Solving/Critical Thinking: </i>Advanced problem-solving skills to assist in resolving IT control deficiencies. Assist in developing and implementing mitigation plans, as well as ensuring timely execution of IT remediation plans.</li>
<li><i>Organization: </i>Excellent organizational skills to manage multiple IT control testing tasks and ensure thorough documentation of testing results, enable daily status tracking.</li>
<li><i>Communication: </i>Strong communication skills (written/verbal) for documenting IT control findings, drafting technical reports, and presenting results to team members and management. Technical skills in creating presentations to pitch, train and/or summarize results pertaining to IT SOX compliance.</li>
<li><i>Training</i>: Assist in training peers and junior team members by documenting procedures related to executing specific ITGC management review controls.</li>
<li><i>Technical Skills </i>Advanced skills in database querying (SQL), PowerShell, IT security concepts, and system administration principles. Expertise in enterprise systems like Active Directory, ERP systems, change management tools, and IT service management platforms is a plus.</li></ul><br>
<p></p>
<p>
Competencies-</p>
<ul>
<li><i>Attention to Detail: </i>Can follow complex methodologies to execute procedures completely and accurately. Adheres to corporate IPE policy with exceptional accuracy and completeness.</li>
<li><i>IT Control Framework Expertise: </i>Solid knowledge of COBIT Framework, ISO 27001, or NIST and how they apply to daily SOX compliance activities.</li>
<li><i>Accountability</i>: Takes ownership of tracking their work and providing regular, clear updates to management on project status, risks, and any issues.</li>
<li><i>Time Management: </i>Effectively manage time to balance multiple IT control execution priorities and meet agreed upon deadlines within the SOX compliance function.</li></ul><br>
<p></p>
<p>
Education and Experience-</p>
<ul>
<li>Bachelor's degree in information systems, computer science, cybersecurity, or related field.</li>
<li>Professional certification in IT audit or security (CISA, CISSP, or equivalent).</li>
<li>Minimum of 5 years of experience in IT controls, IT audit, or IT compliance with a focus on SOX ITGC testing required.</li>
<li>Of the 5 years&rsquo; total experience, a minimum of 3 years' experience in an external IT audit or IT consulting environment with a focus on SOX compliance is preferred.</li>
</ul>
<p>#LI-Hybrid</p><p>
All offers of employment are contingent upon the successful completion of a background check and drug screen, subject to applicable laws and regulations.</p>
<p>UGI Corporation is an Equal Opportunity Employer. The Company does not discriminate on the basis of race, color, sex, national origin, disability, age, gender identity, sexual orientation, veteran status, or any other legally protected class in its practices.</p><br>
</div></div></div></div><p><br>
<b>Nearest Major Market: </b>Philadelphia</p></div></div></div><div></div>

Sr SOX Compliance Analyst - ITGC

Del Moral HR Consulting

<p><b>Compliance Analyst</b></p><p><b>We are looking for a detail-oriented and analytical Compliance Analyst</b> to support and monitor transactional compliance and institutional security within a banking environment. This role is responsible for ensuring adherence to federal and state regulations, as well as internal policies, including those established under the Bank Secrecy Act (BSA), USA PATRIOT Act, and Anti-Money Laundering (AML) requirements.</p><p><b>Position Overview</b></p><p>The Compliance Analyst is responsible for monitoring and validating transactional activity to ensure compliance with applicable laws and regulations. This role plays a critical part in safeguarding the institution, its employees, and client assets by ensuring proper account handling, operational integrity, and regulatory adherence, particularly within International Banking Entities (IBE).</p><p><b>Key Responsibilities</b></p><ul><li>Analyze, investigate, and organize compliance-related tasks in accordance with federal regulatory timelines and requirements for account and transaction monitoring.</li><li>Implement and support all aspects of the Bank&rsquo;s BSA/AML Compliance Program.</li><li>Prepare and submit required reports to the Office of the Commissioner of Financial Institutions.</li><li>Initiate and conduct investigations related to potential violations of BSA/AML policies, procedures, rules, and regulations.</li><li>Collaborate with the Operations Department to review and respond to inquiries related to deposit account openings and approvals.</li></ul><p>Requirements</p><ul><li>Bachelor&rsquo;s degree in Finance, Business Administration, Accounting, Criminal Justice, or a related field.</li><li>Minimum of 2&ndash;4 years of experience in compliance, risk management, or banking operations, preferably within a regulated financial institution.</li><li>Strong knowledge of <b>BSA/AML</b>, USA PATRIOT Act, and applicable federal and state banking regulations.</li><li>Experience in transaction monitoring, investigations, and suspicious activity reporting (SARs) is highly preferred.</li><li>Familiarity with International Banking Entities (IBE) regulations is a plus.</li><li>Proficiency in compliance monitoring systems and core banking platforms.</li><li>Strong analytical, investigative, and problem-solving skills with high attention to detail.</li><li>Ability to manage multiple priorities and meet strict regulatory deadlines.</li><li>Excellent written and verbal communication skills.</li><li>High level of integrity, confidentiality, and professional judgment.</li><li>Bilingual (English/Spanish) preferred.</li></ul><p>Benefits:</p><ul><li>Health insurance</li><li>Paid time off</li></ul><p>Work Location: In person</p>

Compliance Analyst

Anduril

<div><div><p>Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril's family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.</p></div><h3 class="jobSectionHeader"><b>
ABOUT THE JOB</b></h3>
<p>
Anduril's International Trade Compliance team seeks an experienced Export Compliance Analyst to help build our Compliance team supporting the future technology of defense. In this role, you will work across many aspects of Anduril's business including helping obtain and manage export authorizations, implementing compliance best practices and supporting our internal teams as a primary interface to Compliance. This position is based in Costa Mesa, CA or Washington, D.C. Anduril is a fast-growing company at the early stages of growth. Consistent with this fast growth, members of Anduril's International Trade Compliance team must be resourceful, creative, and eager to take ownership of complex matters. The Export Compliance Analyst role will require creativity and resourcefulness to implement and manage efficient, high-compliance processes for complex rules, with a singular focus on helping Anduril deploy its path-making technology into operational settings for the United States and its allies. The Export Compliance Analyst will be expected to take responsibility for significant, material projects, which will have a significant impact on the company's business. Our team is passionate about the law and policy of defense technology and you should have an independent interest in the key issues in this field. Anduril fosters a diverse, collaborative, culture with tremendous opportunities for ownership and professional growth.</p><br>
<h4 class="jobSectionHeader"><b>
WHAT YOU'LL DO</b></h4>
<ul><li>Ensure compliance with International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR)</li>
<li>Prepare and submit export authorization applications</li>
<li>Provide guidance and training to staff on ITAR and EAR regulations</li>
<li>Monitor and implement changes in export control regulations</li>
<li>Manage and track export authorizations</li>
<li>Liaise with U.S. government agencies</li>
<li>Support the logistics team on hardware exports</li>
<li>Assist in the development, review, and improvement of compliance procedures and processes for U.S. subsidiaries</li>
<li>Perform compliance assessments of export/import authorizations and related transactions and assist in any investigations of potential compliance issues</li>
<li>Support and implement corrective actions that result from compliance issues</li>
<li>Participate in working groups, independent projects, and collaborative efforts with within the compliance function or cross-functionally</li></ul><br>
<p></p>
<h4 class="jobSectionHeader"><b>
REQUIRED QUALIFICATIONS</b></h4>
<ul><li>6+ years of compliance work in export control.</li>
<li>Prior experience working for a defense contractor or U.S. Government</li>
<li>Strong understanding of U.S. export control regulations and compliance requirements</li>
<li>Experience developing, deploying, and maintaining compliance processes.</li>
<li>Strong communication and interpersonal skills</li>
<li>Quick learner and able to contribute to the broader start-up legal function, including topics that may be completely new to you.</li>
<li>Capability to manage multiple complex tasks and work efficiently.</li>
<li>Ability to obtain and maintain DoD Top Secret and Special Access Program (SAP) security clearances</li>
<li>Willing and able to travel at least 15% of time</li>
<li>Experience with export compliance software and/or databases</li></ul><br>
<p></p>
<h4 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h4>
<ul><li>Significant compliance process management experience in defense sector</li>
<li>Experience with Australian and UK trade regulations</li>
<li>Experience with integrating trade compliance tools into ERP, PLM, and other systems</li>
<li>Prior experience as an Empowered Official</li>
</ul><div><p>
The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:</p>
<p><b>
Healthcare Benefits</b></p>
<ul>
<li><b>US Roles:</b> Comprehensive medical, dental, and vision plans at little to no cost to you.</li>
<li><b>UK &amp; AUS Roles:</b> We cover full cost of medical insurance premiums for you and your dependents.</li>
<li><b>IE Roles:</b> We offer an annual contribution toward your private health insurance for you and your dependents.</li>
</ul>
<p><b>Additional Benefits</b></p>
<ul>
<li><b>Income Protection</b>: Anduril covers life and disability insurance for all employees.</li>
<li><b>Generous time off</b>: Highly competitive PTO plans with a holiday hiatus in December. Caregiver &amp; Wellness Leave is available to care for family members, bond with a new baby, or address your own medical needs.</li>
<li><b>Family Planning &amp; Parenting Support:</b> Coverage for fertility treatments (e.g., IVF, preservation), adoption, and gestational carriers, along with resources to support you and your partner from planning to parenting.</li>
<li><b>Mental Health Resources:</b> Access free mental health resources 24/7, including therapy and life coaching. Additional work-life services, such as legal and financial support, are also available.</li>
<li><b>Professional Development:</b> Annual reimbursement for professional development</li>
<li><b>Commuter Benefits:</b> Company-funded commuter benefits based on your region.</li>
<li><b>Relocation Assistance:</b> Available depending on role eligibility.</li>
</ul>
<p><b>Retirement Savings Plan</b></p>
<ul>
<li><b>US Roles:</b> Traditional 401(k), Roth, and after-tax (mega backdoor Roth) options.</li>
<li><b>UK &amp; IE Roles:</b> Pension plan with employer match.</li>
<li><b>AUS Roles:</b> Superannuation plan.</li>
</ul>
<p>The recruiter assigned to this role can share more information about the specific compensation and benefit details associated with this role during the hiring process.</p><br>
<p></p>
<div>
<h3 class="jobSectionHeader"><b>Protecting Yourself from Recruitment Scams</b></h3>
<p>
Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information.</p>
</div>
<div><p>To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind:</p>
<ul>
<li><p><b>No Financial Requests: </b>Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates.</p>
</li>
<li><b>Please always verify communications:</b>
<ul><li>Direct from Anduril: If you receive an email from one of our recruiters, it will <i>only</i> come from an @anduril.com address.</li>
<li>Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com.</li>
</ul>
</li><li><p><b>Exercise Caution with Unsolicited Outreach:</b> If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links.</p>
</li>
<li><p><b>What to Do If You Suspect Fraud:</b> Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to contact@anduril.com. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts.</p>
</li>
</ul></div><h3 class="jobSectionHeader"><b>Data Privacy</b></h3>
<p>
To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/.</p></div></div>

Export Compliance Analyst

Securiti AI

<div>
 <strong>
  About Us
  <br/>
  <br/>
 </strong>
 Securiti is the pioneer of the Data Command Center, a centralized platform that enables the safe use of data and GenAI. It provides unified data intelligence, controls and orchestration across hybrid multicloud environments. Large global enterprises rely on Securiti's Data Command Center for data security, privacy, governance, and compliance. Securiti has been recognized with numerous industry and analyst awards, including;
 <br/>
 <br/>
 <ul>
  <li>
   Most Innovative Startup by RSA
  </li>
  <li>
   Top 25 Machine Learning Startups by Forbes
  </li>
  <li>
   Most Innovative AI Companies by CB Insights
  </li>
  <li>
   Cool Vendor in Data Security by Gartner
  </li>
  <li>
   Privacy Management Wave Leader by Forrester
   <br/>
   <br/>
  </li>
 </ul>
 Be part of an exciting team of researchers, developers, and data scientists developing a new set of foundational technologies that will help enterprises navigate a new era of data privacy and protection regulations globally.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Monitor and analyze global data privacy and AI laws and regulatory developments (e.g., GDPR, CPRA, LGPD, PDPL, EU AI Act, DPDPA, etc.) and maintain regulatory research databases.
  </li>
  <li>
   Interpret case law, official decisions, and regulatory guidance to provide informed privacy and AI legal guidance.
  </li>
  <li>
   Advise business development teams, customers, partners, product teams, internal compliance teams, and other stakeholders on data privacy and AI laws, as well as global best practices related to cookie banners, DSR forms, privacy notices, assessments, etc.
  </li>
  <li>
   Collaborate with industry experts to co-author, edit, and review articles on the privacy and AI landscape.
  </li>
  <li>
   Work with the product marketing and content teams to produce collaterals and knowledge center blogs on legal developments pertaining to AI and privacy.
  </li>
  <li>
   Work closely with product development teams on the development and implementation of regulatory features to ensure default compliance within Securiti&rsquo;s privacy modules.
   <br/>
   <br/>
  </li>
 </ul>
 Discover, collect, and maintain authoritative sources of privacy regulations, guidance, and case law; regularly source and organize regulatory information and developments to develop and maintain privacy and AI research databases.
 <br/>
 <br/>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's or higher degree in Law.
  </li>
  <li>
   At least 1-2 years of work experience in a related legal role.
  </li>
  <li>
   Excellent legal research and comprehension capabilities; specifically, ability to understand, analyze, summarize, and explain global privacy legal requirements and developments regularly.
  </li>
  <li>
   Excellent writing and drafting skills.
  </li>
  <li>
   Ability to occasionally coordinate with remote global teams outside of regular working hours.
  </li>
  <li>
   Certifications in Privacy such as CIPP from organizations like IAPP are a plus.
  </li>
 </ul>
</div>


Global Compliance Analyst

Morningstar

<p></p><div><p><b>The Group:</b>
</p><p>The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure.</p><p></p><p><b><br>
The Role:</b>
</p><p>The Information Security Team is looking for a Senior Analyst Third-Party Vendor Risk Analyst to join the IT Compliance Team. The Senior Third-Party Vendor Risk Analyst will help shape the Information Security Team&rsquo;s third party vendor risk management program. This individual will serve as a subject matter expert for third party vendor risk management, perform vendor risk assessments, propose updates to expand the program&rsquo;s capabilities, increase participation in the program and drive process improvements. This position is based in either our Chicago or Toronto office.</p><p></p><p><b><br>
Responsibilities:</b></p><ul><li><p>
Partner with the business to execute vendor risk assessments</p></li><li><p>
Monitor internal SLAs to ensure we provide timely service to our internal stakeholders
</p></li><li><p>Serve as a subject matter expert for security vendor risk management</p></li><li><p>
Collaborate with the procurement department and other internal stakeholders to improve and expand the vendor risk management program</p></li><li><p>
Review third party security documents (SOC2, security policies, data flow diagrams, etc.)</p></li><li><p>
Perform contract reviews of proposed changes to security requirements in our third party contracts</p></li><li><p>
Liaise with third party vendors as required</p></li></ul><p><br>
</p><p><b>Requirements:</b></p><ul><li><p>
A bachelor&rsquo;s degree and 5+ years&rsquo; experience include 3+ in a vendor risk related role</p></li><li><p>
Experience serving as the subject matter expert for security vendor due diligence
</p></li><li><p>Experience performing contract review of security terms</p></li><li><p>
Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR etc.)</p></li><li><p>
Familiarity with security frameworks (ISO 27001, NIST, etc.) and general security concepts</p></li><li><p>
Strong organizational skills and the ability to multitask and switch priorities with short notice</p></li><li><p>
Strong business analysis, research and analytical skills</p></li><li><p>
Excellent communication skills</p></li></ul><p></p><p><b>
Compensation and Benefits</b></p><p>
At Morningstar we believe people are at their best when they are at their healthiest. That&rsquo;s why we champion your wellness through a wide range of programs that support all stages of your personal and professional life. Here are some examples of the offerings we provide:</p><ul><li><p>
Financial Health</p><ul><li><p>
100% 401k match up to 6% of salary</p></li></ul><ul><li><p>
Stock Ownership Potential</p></li><li><p>
Company provided life insurance - 1x salary + commission</p></li></ul></li><li><p>
Physical Health</p><ul><li><p>
Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company-provided HSA contributions (up to $500-$2,000 annually) for specific plans and coverages</p></li><li><p>
Additional medical Wellness Incentives - up to $300-$600 annual</p></li><li><p>
Company-provided long- and short-term disability insurance</p></li></ul></li><li><p>
Emotional Health</p><ul><li><p>
Trust-Based Time Off</p></li><li><p>
6-week Paid Sabbatical Program</p></li><li><p>
6-Week Paid Family Caregiving Leave</p></li><li><p>
Competitive 8-24 Week Paid Parental Leave</p></li><li><p>
Adoption Assistance</p></li><li><p>
Leadership Coaching &amp; Formal Mentorship Opportunities</p></li><li><p>
Annual Flex Stipend - $1000 annually to cover personal education &amp; well-being expenses
</p></li><li><p>Tuition Reimbursement</p></li></ul></li><li><p>
Social Health</p><ul><li><p>
Charitable Matching Gifts program</p></li><li><p>
Dollars for Doers volunteer program</p></li><li><p>
Paid volunteering days</p></li><li><p>
15+ Employee Resource &amp; Affinity Groups</p></li></ul></li></ul><p></p><p><b>
Total Cash Compensation Range</b></p>
$114,100.00 - 193,975.00 USD Annual<p><b>
Inclusive of annual base salary and target incentive</b></p><p>
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.</p><p></p>
001_MstarInc Morningstar Inc. Legal Entity</div>

Senior IT Risk and Compliance Analyst

State of Vermont

<div><div><div><div><div><b>Overview</b></div>
</div><div><div>
There has never been a better time to bring your values and talents to the collaborative team at the Vermont Department of Taxes. The rewarding work we do supports this brave little state and helps shape its future. We work with proven, dynamic technologies to fund initiatives that preserve the environment, build vibrant communities, strengthen families, and so much more. Discover new opportunities, learn new skills, and solve problems with our dedicated and supportive team.</div><br>
<div></div>
<div>
The Vermont Department of Taxes' Compliance Division seeks a motivated and talented individual to serve as a data analyst, supporting public programs through the accurate and equitable collection of Vermont taxes while helping develop and manage discovery programs that identify compliance opportunities.</div><br>
<div></div>
<div>
Key responsibilities of this position include but are not limited to:</div>
<ul>
<li>Write queries to extract relevant data, assess potential audit program ideas, evaluate findings, and develop, execute, and document programs and campaigns; maintain an internal control program with policies and procedures that ensure the efficiency, effectiveness, and legal compliance of newly implemented initiatives.</li>
<li>Use big data along with knowledge of Vermont and federal tax law, business operations, and accounting practices to identify and address areas where taxes may not be voluntarily reported or paid.</li>
<li>Extract and analyze data to evaluate program outcomes, design reports using various reporting and analytics tools, and collaborate with staff to develop effective compliance solutions.</li></ul><br>
<div><br>
The ideal candidate will:</div>
<ul>
<li>Be self-motivated, analytical, curious and open minded.</li>
<li>Knowledge of programming techniques using tools such as SQL.</li>
<li>Knowledge of Microsoft Office tools such as Excel</li>
<li>Have excellent communication skills.</li>
<li>Ability to understand compliance objectives.</li>
<li>Ability to research and understand nuances of complex tax law and accounting practices</li>
<li>Understanding Relational Database Design</li>
<li>A desire to continue to learn and grow.</li></ul><br>
<div></div>
<div>
For additional information about employee satisfaction and benefits, please visit our website.</div><br>
<div></div>
<div>
The hourly salary rate for this position ranges from $27.50 to $42.94, and State of Vermont benefits are very competitive. The annualized salary for this position ranges from approximately $57,200.00 to $89,315.00. The salary range reflects the minimum and maximum salary potential in the assigned pay grade, and the annualized salary figure is calculated based on 2080 hours of annual compensation and does not include authorized overtime or other compensation. It also doesn't include any time taken off payroll. The starting salary for this position may be negotiable depending on experience and qualifications.</div></div></div><div><div><div><b>
About The Compliance Division</b></div>
</div><div><div>
The Compliance Division is responsible for promoting and ensuring Vermont taxpayer compliance, with a focus on early intervention, education, outreach, and fairness. We value service, integrity, and employee growth, as we aim to support Vermont communities effectively and efficiently. Our team includes auditors, tax examiners, analysts, tax collection officers, and support staff.</div><br>
<div></div>
<div><b>
Background Checks</b><br>
This position will primarily support the Department of Taxes. Candidates must agree to be fingerprinted and pass a background check to be eligible for this position, which will involve access to sensitive federal tax information. Background checks are required by the Internal Revenue Service and are authorized under Vermont law. 3 V.S.A. &sect; 241. In accordance with VDT Standard Operating Procedure 2018-01, Background Investigations, Vermont and national criminal record checks will be conducted on all candidates. Candidates will have the right to withdraw their application before fingerprinting or a background check is conducted.</div><br>
<div></div>
<div>
We value diverse teams and are committed to creating a community of inclusion.</div></div></div><div><div><div><b>
Who May Apply</b></div>
</div><div><div>
This position,<b> Tax Compliance Data Analyst (Job Requisition #54651)</b>, is open to all State employees and external applicants.</div><div><br>
If you would like more information about this position, please contact David.Root@vermont.gov.</div>
<div>
Resumes will not be accepted via e-mail. You must apply online to be considered.</div><div><br>
Please note that multiple positions in the same work location may be filled from this job posting.</div></div></div><div><div><div><b>
Environmental Factors</b></div>
</div><div><div>
Duties are generally performed in a standard office setting. Significant interaction is required with Department staff, contractors to the Department, and outside collection agency personnel as well as the Auditor of Accounts. Data reviewed is highly confidential in nature.</div>
</div></div><div><div><div><b>
Minimum Qualifications</b></div>
</div><div><div>
High School diploma or equivalent AND four (4) years or more at a professional level in quantitative research, statistics, or program evaluation that includes providing support to a business or organization.</div>
</div></div><div><div><div><b>
Preferred Qualifications</b></div>
</div><div><div>
A bachelor's degree.</div>
</div></div><div><div><div><b>
Total Compensation</b></div>
</div><div><div>
As a State employee you are offered a great career opportunity, but it's more than a paycheck. The State's total compensation package features an outstanding set of employee benefits that are worth about 30% of your total compensation, including:</div>
<ul><li>80% State paid medical premium and a dental plan at no cost for employees and their families</li>
<li>Work/Life balance: 11 paid holidays each year and a generous leave plan</li>
<li>State Paid Family and Medical Leave Insurance (FMLI)</li>
<li>Two ways to save for your retirement: A State defined benefit pension plan and a deferred compensation 457(b) plan</li>
<li>Tuition Reimbursement</li>
<li>Flexible spending healthcare and childcare reimbursement accounts</li>
<li>Low cost group life insurance</li>
<li>Incentive-based Wellness Program</li>
<li>Qualified Employer for Public Service Student Loan Forgiveness Program</li>
</ul>
<div>Want the specifics? Explore the Benefits of State Employment on our website.</div></div></div><div><div><div><b>
Equal Opportunity Employer</b></div>
</div><div>The State of Vermont celebrates diversity, and is committed to providing an environment of mutual respect and meaningful inclusion that represents a variety of backgrounds, perspectives, and skills. The State does not discriminate in employment on the basis of race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, membership in an employee organization, family medical history or genetic information, or family or parental status. The State&rsquo;s employment decisions are merit-based. Retaliatory adverse employment actions by the State are forbidden.</div></div></div></div>

Tax Compliance Data Analyst

Search 10000+ It compliance analyst jobs near you this March. New roles added regularly across leading industries. Apply today.