Risk Analyst

AHEAD

Location: Chicago, Illinois, USA

Category: Information Technology

Salary: 0 - 0 USD / yearly

Full-time

Job Description

The Risk Analyst supports the delivery of the design, implementation, and maintenance of the information technology risk management and compliance program.

Responsibilities

Develop, implement, and maintain an effective IT risk management and compliance framework that aligns with the organization's objectives and regulatory requirements.
Develop and oversee the IT risk assessment process to ensure that risks are identified, assessed, and managed in a controlled and systematic manner.
Ensure that IT processes and systems are properly assessed for risk and compliance, and that they receive appropriate evaluation and authorization before implementation.
Support creating, reviewing, and updating IT risk management and compliance policies and procedures to ensure they reflect current best practices, regulatory requirements, and organizational needs.
Execute Vendor risk assessment and analysis efforts by developing, delivering, and evaluating vendor responses.
Support Client due diligence efforts by reviewing, routing, and responding to client assessments, RFPs, and other inbound inquiries.
Work closely with sales and legal teams to ensure that client security and risk obligations are understood and met.
Support internal and external audits by providing necessary documentation and ensuring that findings are addressed in a timely manner.
Develop and deliver training programs to raise awareness of IT risk management and compliance policies and procedures across the organization.
Work closely with Management, Operations, Infrastructure, and Applications teams to establish processes, procedures, and documentation that ensure systems and resources meet necessary compliance requirements and obligations.
Develop and execute metrics and KPIs for IT risk management and compliance.

Qualifications

Bachelor’s degree or equivalent experience.
Experience in IT Risk Management, IT Audit/Compliance, or Information Security is desired.
One or more security certifications such as CISSP, CRISC, CISA or Security+ is desired.
Demonstrated experience with the use and management of risk management and compliance frameworks such as ISO/IEC, NIST, COBIT, PCI-DSS, GDPR, or CMMI.
Excellent oral and written communication skills are required.
Highly organized and able to work independently.

Perks & Benefits

Medical, Dental, and Vision Insurance
401(k)
Paid company holidays
Paid time off
Paid parental and caregiver leave
Plus more! See benefits here for additional details.

Why Join Us?

Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.

We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.