IT Risk and Security Analyst  

PRIMARY PURPOSE OF THE POSITION

• This position will be a member of Global IT Risk & Security, reporting to the Senior IT Section Leader. The incumbent will work in partnership with their team members & other parts of IT, to identify risk in partnerships across IT and the business
• Typical activities include performing third party risk assessments, evaluating risks with third parties, coordination with legal and contract review processes, follow up on closure of risks, and periodic risk assessments
• This position independently handles complex security risks & provides guidance business users
• The position requires the ability to work well with others & manage multiple priorities related to a variety of tasks

PRIMARY DUTIES and RESPONSIBILITIES

• Perform Third Party IT Risk Assessments and coordinate with project teams and the business to ensure minimum requirements are met
• Assists in technical support and maintenance; including enhancement of security related to third party software. Has developed unique skills & abilities valued by his/her peers
• Perform reviews of security reports provided by third parties and complete surveys received from third parties based on security guidelines and industry standards
• Work with Deskside support, server administration & other parts of IT to understand security requirements
• Participate in various cybersecurity projects as a team member & lead smaller efforts

• Bachelor's Degree in computer science, MIS, engineering or related discipline
• IT Audit, Cybersecurity, IT compliance and/or privacy classes (desired)
• Bachelor's degree in MIS, computer science, technology and 1-3 years of relevant work experience or in lieu of degree 6-8 years of relevant work experience in Information Technology.
• 1-3 years' work experience in information technology, IT Audit, IT security, and/or IT risk & compliance is preferred
• Strong analytical & problem-solving skills
• Can convey complex & technical issues to diverse audiences, orally & in writing
• Demonstrated knowledge of current Microsoft products (especially Excel, Word & PowerPoint), IT security tools & basic coding
• Understanding of business acumen & the organization
• Ability to apply different strategies to convince others to change their opinion or plan