Risk & Compliance Analyst
Primary Roles & Responsibilities:
· Review proposed customer contracts for compliance and regulatory issues
· Coordinate external audits of the IT environment
· Develop and maintain both automated and manual continuous audit processes
· Educate users on IT controls processes
· Report compliance results & metrics to executive teams
· Provide continual improvement objectives to better align to external requests
· Build a strong knowledge and understanding of systems and processes
· Assist in development of data governance processes and RACI
· Review and Update internal corporate Policies based on Industry best practices and Regulatory requirements
· Understand and document Data workflows and lifecycles
· Establish Processes to improve the life cycle Management of Contracts
Knowledge, Skills, Abilities:
· Strong familiarity with risk, compliance, and audit frameworks and the various ways they are applied in IT environments
· Understanding of IT regulations – particularly in the privacy domain
· Ability to scope, assess, and revise contracts and suggest edits based on business drivers and compliance needs.
· Ability to implement controls in a diverse technical and geographically distributed environment
· Ability to convince a highly varied audience to follow prescribed controls
· Comfort with presenting progress reports and results to senior leadership
· Understanding of process design and compliance terminology
· Ability to write and speak clearly, consistently, and concisely
· Ability to Multitask responses to multiple Contracts and meet given deadlines
· Ability to be self-driven, Motivated with end-to-end ownership on contracts management
· Excellent Audit Life Cycle Management skills, Use of Excel sheet, document management, ability to track documents versions, evidence etc.
Education/Experience Requirements:
· 4+ years of prior experience in IT risk, auditing, Contracts evaluation, and/or compliance strongly preferred.
Supervisory Responsibility:
This position may take on a leadership role of other employees during certain projects and audits.
Certifications Desired / Preferred
· CISA and/or CRISC
· CISM or CISSP
Black Box is a leading technology solutions provider. Our mission is to accelerate our customers’ business by valuing relationships with our team members, clients and stakeholders. By continuously growing our knowledge, we remain relevant in the market and are in a superior position to help customers design, deploy and manage their IT infrastructure. Through our values, such as innovation, ownership, transparency, respect and open-mindedness, we deliver high-value products and services through our global presence and 2,500+ team members in 24 countries and growing. Black Box is a wholly-owned subsidiary of AGC Networks.
Black Box is an equal opportunity employer. Black Box does not discriminate against individuals on the basis of race, color, marital status, sex, sexual orientation, gender identity, religion, national origin, age, disability, veteran status, genetic information, or any other protected status, and endorses those policies and practices which seek to recruit, hire, train and promote the most qualified persons into available jobs.