it risk manager

<div>
 
 
 Job Summary
 
 
 
 
 
 
 The IT Governance &amp; Continuity Manager is responsible for ensuring the resilience, governance, and financial efficiency of the organization's IT operations. The role oversees Business Continuity Planning (BCP), Disaster Recovery (DR), IT vendor management, IT financial management, and IT audit coordination. This position ensures that IT services remain secure, compliant, cost-effective, and capable of supporting business operations during disruptions.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 Business Continuity &amp; Disaster Recovery
 
 <ul>
 <li>
 Develop, implement, and maintain Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies to ensure minimal disruption to business operations.
 </li>
 <li>
 Conduct regular risk assessments and business impact analyses to identify critical systems and processes.
 </li>
 <li>
 Plan and execute disaster recovery tests, simulations, and drills to validate recovery procedures.
 </li>
 <li>
 Coordinate with IT and business teams to ensure readiness and alignment with organizational resilience objectives.
 </li>
 <li>
 Maintain documentation of recovery procedures and ensure regular updates.
 </li>
 </ul>
 
 
 
 
 IT Vendor Management
 
 <ul>
 <li>
 Manage relationships with IT vendors and service providers to ensure service quality and compliance with contractual obligations.
 </li>
 <li>
 Oversee vendor performance through Service Level Agreements (SLAs) and Key Performance Indicators (KPIs).
 </li>
 <li>
 Participate in vendor selection, contract negotiation, and evaluation processes.
 </li>
 <li>
 Ensure vendors comply with security, regulatory, and operational standards.
 </li>
 </ul>
 
 
 
 
 IT Financial Management
 
 <ul>
 <li>
 Assist in preparing and managing the IT budget, ensuring alignment with organizational goals.
 </li>
 <li>
 Monitor IT expenditures and optimize costs related to infrastructure, software, and services.
 </li>
 <li>
 Provide financial reporting and analysis on IT spending, investments, and cost optimization opportunities.
 </li>
 <li>
 Support financial planning for IT initiatives and projects.
 </li>
 </ul>
 
 
 
 
 IT Audit &amp; Compliance
 
 <ul>
 <li>
 Coordinate internal and external IT audits to ensure compliance with regulatory, security, and governance standards.
 </li>
 <li>
 Maintain IT policies, procedures, and controls aligned with industry best practices.
 </li>
 <li>
 Address audit findings and ensure remediation plans are implemented effectively.
 </li>
 <li>
 Ensure compliance with frameworks such as
 
 ISO 27001
 
 ,
 
 COBIT
 
 , and
 
 ITIL
 
 where applicable.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Technology, Computer Science, Information Systems, or a related field.
 </li>
 <li>
 5+ years of experience in IT governance, business continuity, disaster recovery, or IT risk management.
 </li>
 <li>
 Experience in vendor management and IT financial oversight.
 </li>
 <li>
 Familiarity with IT governance frameworks such as
 
 ISO 22301
 
 ,
 
 ISO 27001
 
 ,
 
 COBIT
 
 , and
 
 ITIL
 
 .
 </li>
 <li>
 Strong analytical, organizational, and communication skills.
 </li>
 <li>
 Relevant certifications such as CBCP, ISO 22301 Lead Implementer, CISA, or ITIL are preferred.
 </li>
 </ul>
 
 
 
 
 
 Key Competencies
 
 
 <ul>
 <li>
 Risk Management &amp; Business Resilience
 </li>
 <li>
 IT Governance &amp; Compliance
 </li>
 <li>
 Vendor Relationship Management
 </li>
 <li>
 Financial Planning &amp; Cost Optimization
 </li>
 <li>
 Audit Coordination &amp; Control Management
 </li>
 <li>
 Crisis Management &amp; Incident Response
 </li>
 </ul>
 
 
</div>

IT Governance & Continuity Manager

Tenneco

<div><div>Job Description &ndash; Senior Manager of IT Internal Controls</div> 
<div></div>
<div>
ABOUT TENNECO</div>
<div>
At Tenneco, we don&rsquo;t follow industry standards; we set them, and we don&rsquo;t settle for being best-in-class because we hustle to be better than best-in-class. Whether it&rsquo;s our Core Values&ndash;radical candor, simplify, organizational velocity, tenacious execution and win&ndash;or our Get Stuff Done (GSD) mindset, we&rsquo;re determined to become the most trusted partner and best manufacturer and distributor to the transportation industry.</div> 
<div></div>
<div>
How do we make it happen? Through the Tenneco Way. Fueled by our Core Values, a winning mindset and a relentless commitment to excellence, the Tenneco Way is how we win. It&rsquo;s what keeps Team Tenneco bold, driven, and unapologetically focused on pushing past limits and redefining success.</div> 
<div>
</div><div>Here, you&rsquo;ll work alongside a team of relentless problem-solvers who are committed to making a tangible impact. If you&rsquo;re ready to break boundaries, deliver results, and enjoy the ride along the way, you&rsquo;ll thrive here.</div><div> 
Want to learn more about who we are? Check out our website to discover the Tenneco Way.</div> 
<div></div>
<div>
ABOUT THE ROLE</div>
<div>
The Senior Manager of IT Internal Controls will oversee the development and maintenance of a comprehensive IT internal control framework that ensures the integrity, security, and compliance of our global information systems and technology infrastructure. This role is critical in meeting Sarbanes-Oxley Act (SOX) requirements, supporting compliance across multiple international markets, and addressing the complex IT risks inherent in the automotive supply chain. A key responsibility will be to support the effective establishment of an internal audit function focused on IT controls and risk management to strengthen governance and compliance throughout the organization.</div> 
<div></div>
<div>
KEY RESPONSIBILITIES</div>
<ul>
<li>Design, implement, and maintain IT internal controls related to financial reporting systems and key IT processes across global operations, ensuring alignment with SOX and international regulatory requirements.
</li><li>Lead IT risk assessments focusing on global IT systems, cybersecurity, access controls, change management, data privacy, and IT operational risks affecting financial reporting.
</li><li>Collaborate with global IT, finance, compliance, and internal audit teams to embed controls across ERP systems, manufacturing execution systems (MES), supply chain management platforms, cloud services, and cybersecurity programs.
</li><li>Manage IT control testing, remediation efforts, and documentation supporting quarterly SOX compliance cycles and other regulatory audits.
</li><li>Engage with external auditors, regulators, and cross-border compliance teams to facilitate IT control audits and regulatory reviews.
</li><li>Monitor emerging IT risks, evolving regulatory requirements in key global jurisdictions, and automotive industry standards to enhance the IT control environment.
</li><li>Provide leadership and training to global IT and business teams on IT compliance, control practices, and risk mitigation.
</li><li>Prepare comprehensive reports on IT control effectiveness, issues, and remediation status for senior leadership, Audit Committee, and global stakeholders.
</li><li>Foster a global culture of IT governance, risk awareness, data protection, and compliance within a complex automotive supply chain.</li>
</ul>
<div>JOB REQUIREMENTS
</div><ul><li>Education requirement. Bachelor&rsquo;s degree in Information Technology, Computer Science, Accounting, Finance, or related field. Relevant certifications like CISA, CISSP, CISM, CPA, or CIA are strongly preferred.
</li><li>5-10+ years of experience in IT internal controls, IT audit, risk management, or cybersecurity, with experience in a global public company within the automotive or manufacturing sectors preferred.
</li><li>Deep technical knowledge and hands-on experience with SAP ERP systems, including financial, controlling, and supply chain modules.
</li><li>Experience with other global enterprise systems such as Oracle, Microsoft Dynamics, or cloud ERP platforms is advantageous.
</li><li>Expertise in SOX IT general controls (ITGC), application controls, and experience managing compliance across multiple jurisdictions.
</li><li>Familiarity with manufacturing execution systems (MES), automotive-specific IT systems, and supply chain IT platforms.
</li><li>Strong understanding of cybersecurity frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA), and cloud security technologies (AWS, Azure).
</li><li>Proven leadership in managing complex, cross-functional controls programs in a global environment.
</li><li>Superior communication and project management skills with the ability to influence senior leadership and global teams.
</li><li>High ethical standards, integrity, and a commitment to compliance in public company environments.</li></ul> 

<div>
We don&rsquo;t want average. We want exceptional. We want someone who&rsquo;s hungry to build, unafraid to challenge, and bold enough to lead with empathy, speed, and precision. Sound like you? Let us know.</div></div><div></div>

Snr Manager of IT Internal Controls

HugoBank

<div>
 The IT &amp; GRC Auditor will be responsible for strengthening the Bank's technology risk management, cybersecurity, and governance framework. The role includes conducting risk-based IT audits, reviewing internal controls, and assessing compliance with regulatory, data protection, and information security requirements across digital banking systems, cloud environments, IT operations, and GRC processes.
 
 
 
 Essential Duties And Responsibilities
 
 
 
 <ul>
 <li>
 Develop, maintain, and periodically update the IT &amp; Information Security audit universe, ensuring comprehensive coverage of technology risks across the Bank
 </li>
 <li>
 Perform periodic risk assessments and prepare risk-based audit plans, ensuring high-risk and regulatory-critical areas are prioritized
 </li>
 <li>
 Lead and execute end-to-end IT and GRC audits, including cybersecurity, digital banking platforms, application controls, IT infrastructure, cloud environments, and third-party/vendor risk management, in accordance with approved audit methodology and Internal Auditing Standards
 </li>
 <li>
 Evaluate the effectiveness of IT governance, policies, processes, and internal control frameworks; identify control gaps and provide practical, risk-based recommendations
 </li>
 <li>
 Assess compliance with Central Bank regulations, applicable laws, industry standards, and internal governance frameworks related to technology and information security
 </li>
 <li>
 Prepare high-quality audit working papers and reports that are clear, concise, objective, and timely, ensuring audit engagements are delivered within agreed timelines and resource budgets
 </li>
 <li>
 Monitor and report on the status of audit findings and management action plans, including tracking overdue items and performing follow-up reviews to validate remediation effectiveness
 </li>
 <li>
 Undertake special reviews, investigations, advisory and assurance assignments as directed by the Chief Audit Executive
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's in Computer science or a related field. Master's degree preferred
 </li>
 <li>
 Professional Certifications such as CISA, CRISC, CISSP, CISM or CCSP
 </li>
 <li>
 6-8 years of experience in IT Audit, Technology Risk, or Information Security within a bank, financial institution, fintech, or other regulated environment, with exposure to digital systems and technology-driven operations.
 </li>
 <li>
 Hands-on experience in conducting risk-based IT audits covering cybersecurity, IT general and application controls, cloud environments, third-party risk, and regulatory compliance, including audit planning, documentation, reporting, and follow-up in line with professional auditing standards
 </li>
 </ul>
</div>

IT & GRC Auditor

AIR (Advanced Inhalation Rituals)

<div>
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Lead SOX compliance activities for IT General Controls (ITGCs), including planning, scoping, walkthroughs, testing, and reporting across global systems and applications.
 </li>
 <li>
 Perform IT risk and control assessments covering access management, change management, IT operations, cybersecurity, and system implementations, ensuring alignment with SOX, COSO, and COBIT frameworks.
 </li>
 <li>
 Manage documentation of IT processes, ITGC/ITAC risk and control matrices, and system flowcharts to ensure control design adequacy and compliance.
 </li>
 <li>
 Track, monitor, and report on IT control deficiencies, remediation plans, and management action plans to ensure timely closure.
 </li>
 <li>
 Partner with IT, business to provide advisory support on embedding IT controls into new initiatives, system rollouts, and emerging technologies.
 </li>
 <li>
 Support the Enterprise Risk Management (ERM) program by assessing IT-related risks, contributing to risk registers, and providing inputs for dashboards and committee reporting.
 </li>
 <li>
 Prepare and deliver dashboards, presentations, and management updates on ITGC testing, ERM (IT-related) risks, and control environment status for senior leadership and governance bodies.
 </li>
 <li>
 Drive continuous improvement by identifying opportunities for standardization, automation, and enhanced monitoring of IT controls globally.
 </li>
 </ul>
 
 
 
 
 
 Qualifications &amp; Experience
 
 
 <ul>
 <li>
 Master&rsquo;s degree in Information Technology, Computer Science, Information Systems, or related field.
 </li>
 <li>
 3-5 years of relevant experience in IT audit, ITGC testing, SOX compliance, internal controls, or IT risk management.
 </li>
 <li>
 Professional certification preferred: CISA (primary); additional certifications such as CISM, CISSP, CPA, or equivalent considered an advantage.
 </li>
 <li>
 Strong knowledge of IT processes, ERP systems, databases, operating systems, cloud platforms, and experience applying COSO, COBIT, and ISO 27001 frameworks.
 </li>
 </ul>
 
 
 
 
 
 Key Skills and Competencies
 
 
 <ul>
 <li>
 Good understanding of IT processes, ERP systems, databases, operating systems, and cloud platforms, with experience applying COSO, COBIT, NIST, and ISO27001 frameworks.
 </li>
 <li>
 Experience managing global ITGC and IT audit programs and delivering results on time.
 </li>
 <li>
 Strong communication and stakeholder management skills, able to work with IT, Finance, and Risk teams.
 </li>
 <li>
 Proactive and solution-oriented, with ability to take ownership and improve IT controls and risk management.
 </li>
 </ul>
 
 
</div>

Global Lead – IT SOX

Live Nation

<div>Job Summary:
WHO ARE WE?
Live Nation Entertainment is the world&rsquo;s leading live entertainment company, comprised of global market leaders: Ticketmaster, Live Nation Concerts, and Live Nation Media &amp; Sponsorship. Ticketmaster is the global leader in event ticketing with over 620 million tickets sold annually and approximately 10,000 clients worldwide. Live Nation Concerts is the largest provider of live entertainment in the world promoting more than 50,000 events annually for nearly 7,000 artists in 40+ countries. These businesses allow Live Nation Media &amp; Sponsorship to create strategic music marketing programs that connect more than 1,200 sponsors with the 145 million fans that attend Live Nation Entertainment events each year. For additional information, visit www.livenationentertainment.com .
WHO ARE YOU?
Passionate and motivated. Driven, with an entrepreneurial spirit. Resourceful, innovative, forward thinking and committed. At Live Nation Entertainment, our people embrace these qualities. If you are fluent in business Spanish and interested in supporting our growing LATAM divisions, we encourage you to read on.
THE ROLE
We are seeking a Manager to join our Corporate Internal Controls Group, with a primary focus on supporting our LATAM divisions. This role requires fluency in business Spanish, as you will work closely with Spanish‑speaking IT, finance, accounting, and operations teams across Latin America. The role will be engaged to review the existing design, evolve the control framework as the Company grows, and assist in the evaluation and risk assessment of management&rsquo;s control structure. This role will collaborate closely with control owners across all levels &ndash; both in the US and LATAM, to ensure a strong internal controls environment.
Success in this role depends on your ability to communicate complex IT control concepts in Spanish, facilitate risk discussions, and ensure alignment with internal control expectations across multiple countries. The ideal candidate will have a strong IT audit, global risk compliance background from a top-tier public accounting firm, with expertise in IT risk management, ERP systems, and compliance frameworks who can dive deep into a business process discussion with key stakeholders to design and implement internal controls that clearly address risk mitigation, drive process improvements, and ensure financial reporting integrity. Further, the ideal candidate will have deep expertise in IT risk management, ERP systems and compliance frameworks.
<div>WHAT THIS ROLE WILL DO
</div><div><ul><li>Work cross-functionally with LATAM Finance, Accounting, IT and Operations to assess process risks and identify and implement best practices for internal controls.
</li></ul></div><ul><li>Support the Company&rsquo;s expansion in Latin America by designing and implementing controls for new or evolving business activities in the region, in line with global policies and standards.
</li><li>Review and prepare Spanish‑language documentation, including process narratives, flowcharts, and control design materials.
</li></ul><div><ul><li>Identify process inefficiencies and recommend improvements to strengthen internal controls and operational effectiveness.
</li><li>Partner with IT system owners to design and address gaps in IT general controls (ITGCs) and application controls, as well as, system-related risks impacting financial reporting.
</li><li>Provide guidance on IT control design for new system implementations, cloud migrations, acquisitions, and emerging technologies.
</li><li>Assist management in performing risk assessment procedures for both finance and IT processes
</li><li>Assist management in control execution and control review
</li></ul></div><ul><li>Act as a subject matter expert on IT SOX compliance, providing training and guidance to Spanish-speaking IT control owners and stakeholders on appropriate control design and documentation requirements, including providing feedback on strengths and weaknesses.
</li></ul><div><ul><li>Stay abreast of regulatory developments impacting the Company, especially in relation to SEC and PCAOB requirements across both IT and financial controls
</li><li>Assist in developing management review plans, control designs, implementation roadmaps for new groups, and IT control rationalization efforts to ensure an efficient and scalable controls framework.
</li></ul></div><ul><li>Partner with the internal audit function and external auditors to facilitate successful control testing outcomes and risk assessments
</li></ul><div>WHAT THIS PERSON WILL BRING
</div><div><ul><li>Bachelor&rsquo;s degree in Information Systems, Computer Science, Accounting, or a related field (Master&rsquo;s degree preferred).
</li></ul></div><ul><li>Fluency in business Spanish required, including the ability to lead technical discussions, review documentation, and communicate control concepts with Spanish-speaking teams across LATAM.
</li><li>Experience working with LATAM IT, finance, accounting, or operations teams preferred.
</li><li>Ability to review and prepare process documentation, flowcharts, and control narratives in Spanish and engage directly with Spanish-speaking stakeholders.
</li></ul><div><ul><li>CISA or other relevant certification required (e.g., CISSP, CPA, CIA).
</li><li>6+ years of experience in public accounting, IT controls, global risk compliance, and IT audit for a large multinational corporation, with extensive expertise in second-line defense compliance roles.
</li><li>Strong understanding of SOX 404 requirements, IT general controls (ITGCs), application controls, cybersecurity frameworks and ERP systems.
</li><li>Expertise in cloud computing controls, identity and access management (IAM) and system development life cycle (SDLC) best practices.
</li><li>PCAOB audit experience required.
</li><li>Experience with multi-national public companies.
</li><li>Excellent written and verbal communication skills with the ability to translate technical control concepts into practical business solutions
</li><li>Ability to manage multiple projects simultaneously and work collaboratively with stakeholders at all levels.
</li><li>Strong analytical and risk assessment skills.
</li><li>Strong organization skills
</li><li>Willingness to travel to LATAM regions as needed to support controls, training, and process assessments, estimated travel of ~30%
</li></ul></div><div>BENEFITS &amp; PERKS
Our motto is &lsquo;Taking Care of Our Own&rsquo; through 6 pillars of benefits:
</div><div><ul><li>HEALTH: Medical, Vision and Dental benefits for you and your family, including Flexible Spending Accounts (FSA) and Health Savings Accounts (HSAs)
</li><li>YOURSELF: Generous paid time off policy including paid holidays, sick time and paid days off for your birthday, Free concert tickets
</li><li>WEALTH: 401(k) program with company match, Stock Program
</li><li>FAMILY: New parent programs &amp; support including caregiver leave and childcare cash, infertility support
</li><li>CAREER: Tuition reimbursement, student loan repayment internal growth and development programs &amp; trainings
</li><li>OTHERS: Volunteer time off, crowdfunding network
</li></ul></div>EQUAL EMPLOYMENT OPPORTUNITY
We aspire to build teams that reflect and support the fans and artists we serve. Every day we aim to promote environments where everyone can be themselves, contribute fully, and thrive within our company and at our events. As a growing business we will encourage you to develop your professional and personal aspirations, enjoy new experiences, and learn from the talented people you will be working with. 
 
Live Nation strongly supports equal employment opportunity for all applicants regardless of age (40 and over), ancestry, color, religious creed (including religious dress and grooming practices), family and medical care leave or the denial of family and medical care leave, mental or physical disability (including HIV and AIDS), marital status, domestic partner status, medical condition (including cancer and genetic characteristics), genetic information, military and veteran status, political affiliation, national origin (including language use restrictions), citizenship, race, sex (including pregnancy, childbirth, breastfeeding and medical conditions related to pregnancy, childbirth or breastfeeding), gender, gender identity, and gender expression, sexual orientation, intersectionality, or any other basis protected by applicable federal, state or local law, rule, ordinance or regulation.
We will consider qualified applicants with criminal histories in a manner consistent with the requirements of the Los Angeles Fair Chance Ordinance, San Francisco Fair Chance Ordinance and the California Fair Chance Act and consistent with other similar and / or applicable laws in other areas.
We also afford equal employment opportunities to qualified individuals with a disability. For this reason, Live Nation will make reasonable accommodations for the known physical or mental limitations of an otherwise qualified individual with a disability who is an applicant consistent with its legal obligations to do so, including reasonable accommodations related to pregnancy in accordance with applicable local, state and / or federal law. As part of its commitment to make reasonable accommodations, Live Nation also wishes to participate in a timely, good faith, interactive process with a disabled applicant to determine effective reasonable accommodations, if any, which can be made in response to a request for accommodations. Applicants are invited to identify reasonable accommodations that can be made to assist them to perform the essential functions of the position they seek. Any applicant who requires an accommodation in order to perform the essential functions of the job should contact a Human Resources Representative to request the opportunity to participate in a timely interactive process. Live Nation will also provide reasonable religious accommodations on a case-by-case basis.
HIRING PRACTICES
 
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation may pursue all avenues available, including promotion from within, employee referrals, outside advertising, employment agencies, internet recruiting, job fairs, college recruiting
#LI-HYBRIDHOUSTON,TX
#LI-MC2
Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.</div>

Manager - IT Internal Controls Group (LATAM Spanish Speaking)

Crane Company

<div>The Senior IT Governance, Risk &amp; Compliance (GRC) professional is responsible for establishing, overseeing, and continuously improving the organization&rsquo;s IT governance framework to ensure alignment with business objectives, regulatory requirements, and industry best practices. This role leads enterprise ‑ wide IT risk management, compliance, and control activities, including policy ownership, control design, risk assessments, audit coordination, and remediation oversight across business units and technology domains. Acting as a trusted advisor to IT leadership, business stakeholders, and audit partners, the Senior IT GRC role drives consistency, accountability, and transparency in how IT risks are identified, managed, and reported, while supporting compliance with regulatory, contractual, and internal control requirements in a complex, decentralized environment.
Responsibilities and Duties:
<ul><li>Identify, monitor, and support activities responsible for validating the effectiveness of IT security, governance, risk, and compliance programs.
</li><li>Support alignment between IT and audit activities while ensuring adherence to adopted standards, frameworks, and methodologies.
</li><li>Evolve the enterprise IT GRC roadmap, driving continuous improvement in governance maturity, risk visibility, and control effectiveness across the organization.
</li><li>Develop and provide guidance for advisory reviews related to system implementations, technology strategies, mergers and acquisitions, fraud events, and service interruptions.
</li><li>Contribute to a sustainable IT general control environment through involvement in key IT internal control and governance activities.
</li><li>Coordinate with Business Units to align controls with enterprise IT policies, standards, trends, and best practices.
</li><li>Support internal and external audit activities related to IT governance by assisting with policies, narratives, evidence expectations, and self-assessment documentation.
</li><li>Participate in IT risk assessment activities, including third party and service provider risk reviews, and contribute to broader risk management, compliance, and internal control initiatives as needed.
</li><li>Serve as a subject matter resource to support the identification and assessment of IT risks and to improve the effectiveness and efficiency of IT controls.
</li><li>Identify and recommend opportunities for improved governance processes and technology-based tools to support risk mitigation and compliance oversight.
</li><li>Support the development and maintenance of enterprise IT governance policies, standards, procedures, and control requirements to assure compliance with applicable regulatory, audit, and contractual obligations, as well as sound business practices.
</li><li>Review Business Unit certifications and submissions, identify variances, and support the development of remediation actions in coordination with BU leadership.
</li><li>Support formal IT risk analysis and self‑assessment activities for systems, processes, and services, including global asset risk and obsolescence considerations.
</li><li>Contribute to continuity governance and risk mitigation activities related to disaster recovery, backup and recovery practices, and system lifecycle management.
</li><li>Support the development, implementation, and monitoring of compliance oversight activities related to ITAR/DFARS, PCI, data privacy regulations (e.g., GDPR, CCPA), and contractual, licensing, and usage requirements, where governance remains centralized.
</li><li>Liaise with Internal Audit, Corporate Compliance, Legal, and Business Unit IT leadership to support IT governance, risk, and compliance initiatives and audit activities.
</li><li>Monitor IT‑related regulatory, compliance, and legal trends and support the communication of relevant impacts and expectations across the organization.
</li><li>Assist with training and awareness activities for IT staff and Business Units related to IT governance, risk management, and compliance expectations, as needed.
</li></ul>Qualifications and Competencies:
<ul><li>Bachelor&rsquo;s degree in a related field such as Computer Science, Information Technology, or a related discipline.
</li><li>5 + years of experience in an IT GRC or related field required.
</li><li>Risk‑ or audit‑related professional certifications preferred, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), or Certificate of the Business Continuity Institute (CBCI), or equivalent demonstrated experience.
</li><li>Demonstrated experience supporting compliance with Sarbanes‑Oxley (SOX) IT General Controls, including control design, testing coordination, evidence management, and remediation oversight in partnership with Internal and External Audit.
</li><li>Proven knowledge of DFARS and ITAR regulatory requirements as they apply to information systems, data protection, access controls, and service providers, with experience supporting assessments, contractual requirements, and control enforcement across business units.
</li><li>Demonstrated experience supporting enterprise data privacy programs, including the interpretation and application of global privacy regulations such as GDPR and CCPA, participation in data privacy impact assessments (DPIAs), and oversight of privacy‑related controls within IT governance frameworks.
</li><li>Proven ability to partner with Legal, Information Security, Internal Audit, and business stakeholders to assess privacy risks, support contractual and vendor privacy requirements, and ensure appropriate handling, protection, and retention of personal data across systems and service providers.
</li><li>Demonstrated experience providing governance, risk, and compliance oversight for IT resiliency, backup, and recovery programs, including policy development, control definition, risk assessments, and validation of recovery readiness.
</li><li>Proven ability to oversee backup and disaster recovery control effectiveness, including immutability, retention, encryption, and restoration testing, while coordinating evidence, certifications, and remediation activities with Business Units, Information Security, and Internal Audit.
</li><li>Experience operating within a centralized model while enabling consistent execution and compliance across decentralized business units.
</li><li>Experience or working knowledge of IT governance and compliance frameworks such as COSO, ISO 27001, PCI‑DSS, COBIT, and ITIL.
</li><li>Strong analytical and assessment skills with experience supporting IT risk assessments, audits, or compliance activities across a variety of technologies and platforms.
</li></ul>This description has been designed to indicate the general nature and level of work being performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Crane Company. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, gender, sexual orientation, general identity, national origin, disability or veteran status.</div>

Sr. Analyst, IT Governance, Risk & Compliance

AAA The Auto Club Group

<div>It&rsquo;s a great time to join AAA The Auto Club Group!
JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD
Job Type:
Full time 
<div><div>Exempt/Non Exempt: 
</div></div>Salary
Job Description: 
 
 
Sr. IT Risk Analyst &ndash; The Auto Club Group
What you will do:
The Senior IT Risk Analyst executes and maintains the IT risk management program, including the identification, evaluation, and mitigation of information technology risks across the organization.
Primary Duties and Responsibilities:
<ul><li>Drive activities related to the IT risk management strategy in alignment with Enterprise Risk Management processes
</li><li>Organize and update IT risk management policies, standards, and processes
</li><li>Enforce alignment with company objectives and regulatory requirements
</li><li>Support training and development of ERM teammates, measuring performance of the team against a high performing culture and reporting on gaps
</li><li>Perform analysis of key IT Risk performance/risk indicators for management
</li><li>Coordinate internal and external IT risk assessments by driving the project plan as agreed to by IT Risk Management leadership and stakeholders
</li><li>Maintain the IT risk appetites and tolerances to align with organizational objectives and as defined by ERM leadership
</li><li>Conduct monitoring of 1st line access reviews for general users, privileged users, and passwords
</li><li>Lead the maintenance and enhancement of the IT risk register and control library by:
</li><li>Partnering with IT and risk stakeholders to ensure comprehensive documentation.
</li><li>Ensuring timely updates to risk and control records.
</li><li>Clearly assigning risk ownership across business and technology teams
<ul><li>Drive regulatory readiness efforts and governance assessments for the IT controls environment by:
</li></ul></li><li>Coordinating cross-functional efforts across business and technology teams.
</li><li>Identifying gaps in control coverage or compliance.
</li><li>Recommending remediation strategies to ensure alignment with applicable standards and regulations.
<ul><li>Proactively identify and analyze emerging threats, technologies, and regulatory changes that may impact the organization&rsquo;s IT risk posture.
</li><li>Provide expert insights and recommendations to stakeholders to support timely decision-making and strategic planning Lead the identification of changes in the organization that will impact the risk landscape (major system implementations, acquisitions) and execute controls readiness activities with owners and stakeholders
</li><li>Coordinate and deliver training to company stakeholders on IT risk
</li><li>Contribute to Enterprise Risk Management team&rsquo;s reporting and processes (e.g. key risks, watch list risks, AI Systems Program)
</li><li>Coordinate with IT risk stakeholder groups and IT risk owners across the organization (IT management, IT security, internal audit, legal, privacy, compliance, etc.)
</li></ul></li></ul>Supervisory Responsibilities:
None
How you will benefit:
Sr. It Risk Analyst will earn a competitive salary of $80,000 - $100,000 annually with annual bonus potential based on performance.
Excellent and comprehensive benefits packages are just another reason to work for the Auto Club Group. Benefits include:
<ul><li>401k Match
</li><li>Medical
</li><li>Dental
</li><li>Vision
</li><li>PTO
</li><li>Paid Holidays
</li><li>Tuition Reimbursement
</li></ul>We&rsquo;re looking for candidates who:
Required Qualifications:
Education:
<ul><li>Bachelor&rsquo;s degree in information technology, cybersecurity, risk management, computer science, or related area
</li></ul>Experience:
<ul><li>5-7 years of experience in IT risk management, IT audit, cybersecurity, or related roles with experience mentoring junior team members and coordinating projects
</li><li>Prior experience with IT risk management frameworks (e.g. NIST CSF, COBIT) in the insurance or financial services industry
</li><li>Proven growth in the ability to assess complex IT environments and articulate risk in business terms
</li></ul>Knowledge of:
<ul><li>Property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
</li><li>Internal controls and core IT technologies and processes including network and operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
</li><li>Risk assessment methodologies and GRC tools
</li></ul>Skills:
<ul><li>Strong written and verbal communication skills
</li><li>Strategic thinking and business acumen
</li><li>Decision making under uncertain conditions
</li><li>Present complex problems in a concise and effective manner, especially when translating expectations between third line or external audit assurance groups and first line risk and controls owners within IT
</li><li>Influence various levels of management by ensuring strong relationship management and value demonstration to a wide set of stakeholders
</li><li>Identify, assess, and prioritize IT risks
</li><li>Multitask and work closely and effectively with other employees
</li><li>Communicate and report to business and IT stakeholders
</li><li>High degree of attention to detail and organization
</li><li>Maintain a high volume of work with few mistakes or delays
</li></ul>Preferred Qualifications:
Education:
<ul><li>Master&rsquo;s degree in Information Technology, Cybersecurity, Risk Management, Computer Science, or related area; MBA also considered
</li><li>One or more of the following professional certifications such as CISA, CISM, CRISC, or CISSP are strongly preferred
</li></ul>Experience with:
<ul><li>IT systems and technologies including ServiceNow, Saviynt, Workday, SAP, Salesforce, Guidewire
</li><li>IT risk management for emerging technologies such as AI, machine learning, cloud computing, process automation, data analytics, etc.
</li></ul>Work Environment
This is a hybrid work arrangement (time spent in office and remote). Depending on the employee's role and leadership's assessment, some employees will come in to an ACG facility on a weekly basis, a monthly basis, or on an &quot;as needed&quot; basis for key meetings and collaborative activities. Most employees will be required to come into the office, at a minimum, for important departmental meetings or team building events.
Who We Are
Become a part of something bigger.
The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.
By continuing to invest in more advanced technology, pursuing innovative products, and hiring a highly skilled workforce, AAA continues to build upon its heritage of providing quality service and helping our members enjoy life&rsquo;s journey through insurance, travel, financial services, and roadside assistance.
And when you join our team, one of the first things you&rsquo;ll notice is that same, whole-hearted, enthusiastic advocacy for each other.
We have positions available for every walk of life! AAA prides itself on creating an inclusive and welcoming environment of diverse backgrounds, experiences, and viewpoints, realizing our differences make us stronger.
To learn more about AAA The Auto Club Group visit www.aaa.com
Important Note:
ACG&rsquo;s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.
The above statements describe the principal and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfill these requirements.
The Auto Club Group, and all its affiliated companies, is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.
Regular and reliable attendance is essential for the function of this job.
AAA The Auto Club Group is committed to providing a safe workplace. Every applicant offered employment within The Auto Club Group will be required to consent to a background and drug screen based on the requirements of the position.</div>

Sr. IT Risk Analyst

Search 10000+ It risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.