Analyst Risk Reporting Specialist

• The Analyst: Risk Reporting role is responsible for analyzing and reporting on cybersecurity risks and compliance within the organization. They monitor and evaluate security controls, identify potential vulnerabilities, and develop risk mitigation strategies. They also prepare reports and presentations for senior management and stakeholders, outlining the current state of cybersecurity risk and compliance within the organization. This role will help advance processes and decision making through automation and reporting improvement.

• IT Risk Management: Knowledge of tools, techniques, approaches, and processes of IT risk management; ability to apply risk management methods to information technology to manage IT risk.
• Frameworks and Industry Standards: Knowledge of cybersecurity enterprise programs, policies, and standards to govern the organization's approach towards protecting their systems; Ability to align them with regulations, organization's context, operating environment, and cyber threats.
• Operational Reporting: Knowledge of operational reporting concepts; ability to use operational reports to track, benchmark, and improve business processes.
• Information Technology (IT) Security Policies: Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
• Risk & Control Self-Assessment (RCSA): Knowledge of risk and control self-assessment (RCSA); ability to assess, clarify, and appraise significant risks inherent in business activities as well as to ensure that internal controls, policies, and procedures are accurate and adequate.
• Data Gathering and Reporting: Knowledge of tools, techniques, and processes for gathering and reporting data; ability to practice them in a particular department or division of a company.
• Technical Writing/Documentation: Knowledge of technical writing; ability to write technical documents such as manuals, reports, guidelines or documents on standards, processes, and applications.

• Hybrid: 3 days per workweek in the office

• This position is not eligible for work visa sponsorship

Education:

• IS related bachelor's degree and/or equivalent work experience.

Minimum experience:

• 5+ years of IT business work experience with Bachelors
• 8+ years of applied work experience with no degree
• Experience with Microsoft Power Automate, PowerBI
• Experience with and understanding of ServiceNow modules and data

Other job-specific skills:

• Compliance and Assurance: Knowledge of compliance and assurance processes, regulations and standards involving different systems; ability to facilitate the processes and assess and enhance the organization's internal controls with evolving compliance standards.
• Modeling: Data, Process, Events, Objects: Knowledge of data, process, and events; ability to use tools and techniques for analyzing and documenting logical relationships among data, processes, or events.
• Communicating Complex Concepts: Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, clear language appropriate to the audience.
• Cross-functional Collaboration: Knowledge of collaborative techniques and approaches; ability to promote a culture of continuous improvement and working together across functions to solve business problems and meet business goals.
• Decision Making and Critical Thinking: Knowledge of the decision-making process and associated tools and techniques; ability to accurately analyze situations and reach productive decisions based on informed judgment.
• Domain Knowledge: Knowledge of a specific domain, its current trends, directions, and regulatory considerations; ability to apply domain-specific knowledge to relevant situations.
• Information Capture: Knowledge of the methods, channels, and processes to obtain needed information; ability to identify, capture and document relevant business information in an auditable, organized, understandable and easily.
• Problem Solving: Knowledge of approaches, tools, techniques for recognizing, anticipating, and resolving organizational, operational or process problems; ability to apply knowledge of problem solving appropriately to diverse situations.