Compliance & Risk Analyst, SOX Focus, Progression (Level II

Title: Compliance & Risk Analyst, SOX Focus, Progression (Level II)
Company: Tampa Electric Company Location: Midtown East Tower State and City: Florida - Tampa Shift: 8 Hr. X 5 Days

Hiring Manager: Denise Toole

TITLE: Compliance & Risk Analyst, SOX Focus, Progression

PERFORMANCE COACH: Lead Compliance & Risk Assurance / Manager

COMPANY: Tampa Electric Company

DEPARTMENT: Technology

Please note that this position can be hired at any level within the job family of progression, based on education and experience, but seeking ideally to hire this role at level II.

• Intermediate level knowledge of Sarbanes-Oxley regulatory requirements.
• Working knowledge of SAP system landscape, configuration or controls.

POSITION CONCEPT The Compliance & Risk Analyst/Advisor progression carries out procedures to ensure all information systems products and services meet Technology organization standards and compliance obligations, including regulatory requirements, contractual requirements, and Emera requirements. Analysts are primarily responsible for the maintenance, training, assurance, monitoring and reporting of all IT standards and procedures, as well as Technology-related regulatory requirements for the Technology Department and individual business units as applicable.

Advancement to a higher level is based on value added to the Company through increased duties, responsibilities, and accomplishments. Advancement is not automatic, i.e. based solely on time in the job, but will be based on the employee's performance, qualifications, and the technical needs of the department.

1. Assurance and Information Management:
Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements, e.g., NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), contractual requirements (e.g., Payment Card Industry (PCI) Data Security Standards (DSS), Defense Federal Acquisition Regulation System (DFARS) requirements, internal requirements, e.g., Emera, voluntary requirements, e.g. America Gas Association commitment to Department of Homeland Security (DHS) Transportation Safety Administration (TSA) Pipeline Security Guidelines, and customer requirements.

Manages compliance related information and documentation consistent with retention requirements. Support collection, review and approval of compliance-related data. Facilitates and tracks deliverables for root cause analysis, compliance reporting, technical feasibility exceptions, and NERC Alerts. [25%]

2. Controls & Monitoring:
Administers the IT Compliance Management Systems and Governance, Risk, and Compliance (GRC) tool(s). Collect and sample evidence to support demonstration of compliance. Escalates out of compliance items to senior management. Participate in the implementation of technology-based tools (e.g., GRC) to support IT risk initiatives. Additionally, analyst adheres to company confidentiality and security requirements. [20%]

3. Reporting:
Documents all quality problems and compliance issues, and assists in their resolution. Performs quality audits across various IT&T functions to ensure quality standards, procedures, and methodologies are followed. Monitors and reports on exceptions, risks and exposures to Technology senior management. [20%]

4. Policies, standards, and processes:
Analyzes best-in-class processes including IT Information Library (ITIL), National Institute of Standards and Technology (NIST) standards, and COBIT, and keeps current on all regulatory and compliance issues relating to Information Technology. Maintains all Technology standards, procedures and policies. Maintains internal desk-level procedures. [15%]

5. Training and Communications:
Develops and delivers quality process training to technical staff and acts as an internal quality consultant to facilitate business or technical partners on the use of the Technology Standards and Procedures. [10%]

6. Performance Management:
Establishes, and administers, activities of performance analysis (e.g., metrics) within assigned areas of responsibility. [10%]

SUPERVISION Direct:
No direct reports.

Internal:
Directly accountable to the IT Quality Assurance and Compliance Director. Indirectly accountable to the Lead Compliance Analyst for day-to-day and project activities. Interacts with all levels of TSI IT&T; selected individuals in Tampa Electric Energy Delivery, Energy Supply, Corporate Security, Facility Services, Human Resources, Emergency Management, Customer Experience, Regulatory Affairs, Audit Services, Corporate Accounting; PGS Compliance, Gas Operations; NMGC Compliance, Customer Service, Gas Operations;

and Emera Compliance and Cyber Security.

External:
Responsible for building and maintaining external relationships with vendors, contractors, and external auditors.

POSITION CONCEPT The Compliance and Risk Analyst II, under general supervision, carries out procedures…