Assurance & Compliance Senior Analyst

Job Description:

This position is part of a team that coordinates the execution of audits by internal and external teams to validate IT controls, including whether AI controls are being operated effectively. This position is also responsible for managing the compliance auditing process and the resultant reporting, remediation, and follow-up activities associated with it. The team is responsible for collecting management responses and tracking remediation and readiness for follow-up testing. Root cause analysis and trends are used as inputs to the corporate control framework. Team members also conduct training for control owners and are sometimes embedded in large projects to assist in control design and adherence to the SDLC framework.

What will be your key responsibilities?

• Act as a primary liaison for internal and external audits, coordinating evidence collection, management responses, and remediation tracking.

• Plan and assist with security assessments against frameworks such as the NIST Cybersecurity Framework (CSF) and NIST 800-53

• Monitor and validate that control deficiencies are remediated promptly, and report on the status to leadership.

• Serve as a security and compliance subject matter expert for business and IT projects, providing guidance on control design for new systems and processes.

• Continuously identify and implement opportunities to mature and streamline assurance activities, testing methodologies, and compliance reporting.

Qualifications

1. Education & Professional Qualification

• Business or technical degree

• Significant experience in digital technologies/governance

2. Knowledge/Experience

• Technical experience in AI, Responsible or Trustworthy AI, risk-based assessments, info security, and data science

• Strong follow-through, execution, and attention to detail in a complex environment with multiple stakeholders.

• Track record of developing external networks to stay connected with the latest trends, to build best practices and strategies.

• A history of developing strong internal networks, able to inspire others and help others build capabilities.

• Ability to set and achieve goals and manage multiple projects and priorities.

• Excellent ability to communicate (oral and written) and create presentations/visual materials.

• Business process design.

#TBdigital