IT Risk & Compliance Specialist

IT Risk & Compliance Specialist

25 Amica Way, Lincoln, RI 02865

Thank you for considering Amica as part of your career journey, where your future is our business.

At Amica, we strive to build a culture of belonging where employees are encouraged to share their unique experience to enrich our workplace, strengthen our company’s mission and broaden our vision of what’s possible. We’re focused on creating a workplace that works for all. We’ll continue to provide training, guidance, and resources to make Amica a true place of belonging for all employees.

Want to learn more about our commitment to diversity, equity, and inclusion? Visit our DEI page to read about it!

As a mutual company, our people are our priority. We seek differences of opinion, life experience and perspective to represent the diversity of our policyholders and achieve the best possible outcomes.

This is a full-time position based on a 37.5-hour work week. The starting annual salary is between $68,912 - $103,235 based on the level of previous experience. In addition, hired applicants will be eligible for the company’s annual variable incentive paid based on company performance.

This role is open to full-time remote work, or hybrid onsite in our Lincoln, RI office. Our normal business hours are Monday – Friday, 8am – 5pm Eastern Time.

This role does not currently offer employment visa sponsorship.

Our Lincoln, RI office is seeking an IT Risk & Compliance Specialist who will collaborate with business unit management to manage and assess, on an ongoing basis, all aspects of technology and operational risk. This position participates in strengthening the control environment and reducing risk against the business unit’s risk profile and tolerances.

• Collaborate with IT Leadership, Enterprise Cybersecurity, Internal audit and Enterprise Risk Management as well as Divisional risk and compliance teams.
• Build, challenge, test, document and assess risks and controls of CIS business processes in support of internal and external regulations and policies.
• Coordinate the development of IT policies, communicate those policies and standards within CIS and across Amica, and ensure compliance with internal and external regulations and policies.
• To be CIS custodian of the enterprise GRC tool; to train and develop internal procedures and guidelines.
• Identify, create, and manage risk issues from remediation to closure.
• Function as a data steward to assess third party risks.
• Lead in the identification, collection and management of metrics related to various IT risk and control areas.
• Coordinate internal and external audit testing, documentation, and remediation activities.
• Develop, maintain, and mature an effective end-to-end IT risk and compliance management program.
• Provide subject matter expertise regarding regulations, operational risk, governance, security, and control frameworks that affect CIS.
• Develop a broad and detailed understanding of the organization’s landscape, culture, and technology.
• Understand the various businesses and the applicable regulations which govern them.
• Share knowledge to ensure individuals and teams have the appropriate breadth and depth to offer support to the business, projects, and day-to-day operations. This may include mentoring, providing effective guidance and/or feedback.
• Serve as an internal champion of change initiatives undertaken by the organization.
• Actively seek out opportunities to learn and apply emerging trends such as best practices and standards.
• Look for challenging assignments that add value to the organization and apply learnings from those opportunities in his or her own role.
• Independently learn from failures or missteps and apply learnings in various contexts.
• Foster a culture that values learning and creativity both individually and as a team.
• Identify continuous improvement opportunities to automate development, provisioning, and release work to accelerate and improve the quality of solutions delivery.
• May be called upon to handle other duties as required.

• Bachelor's degree and 2 years’ experience with IT process analysis, or, an equivalent combination of education…