FAQs
What is the primary role of the IT Risk & Control Analyst?
The primary role of the IT Risk & Control Analyst is to support the Data and Machine Learning vertical in identifying, assessing, and advising management on various financial, regulatory, operational, and strategic risks, as well as contributing to the annual SOx Program activities.
What are the key responsibilities of this position?
Key responsibilities include supporting stakeholders in understanding IT risks, facilitating SOx activities, managing risks in the GRC platform, and collaborating with other Risk Analysts to ensure proper control design and documentation.
What qualifications are required to apply for this position?
Required qualifications include previous work experience in risk management, IT audit, financial audit, and/or internal controls, a strong knowledge of risk management and ITGCs, and effective communication and multitasking skills.
Are there any preferred qualifications for this position?
Yes, preferred qualifications include familiarity with technologies like AWS and Snowflake, experience with financial audits, and knowledge of applicable IT frameworks such as COBIT, ITIL, NIST, and ISO standards.
Is knowledge of regulatory compliance risks important for this role?
Yes, a strong understanding of regulatory compliance risks, such as Cloud Security, SOx, and GDPR, is crucial for supporting business stakeholders effectively.
What tools or platforms will the IT Risk & Control Analyst be using?
The IT Risk & Control Analyst will use the GRC platform, specifically ServiceNow, to upload and maintain risks, controls, and issues.
What skills are essential for success in this role?
Essential skills include flexibility to adapt to dynamic environments, strong communication and relationship-building skills, self-motivation and organization, and the ability to prioritize and multitask effectively.
What other team members will the IT Risk & Control Analyst work with?
The IT Risk & Control Analyst will collaborate with other Risk Analysts and Officers to ensure that business and IT process linkages are well understood.
Are there opportunities for professional development in this position?
While the job description does not specify, positions in risk management typically offer opportunities for professional development, especially in relation to compliance and audit practices.
Is fluency in English required for this role?
Yes, strong communication skills and full proficiency in English, both written and spoken, are required for effective collaboration and documentation.