Sr. Technology Risk Engineer - Hybrid

Job Summary

Senior Technology Risk Engineer Contractor – 5-10 years experience required. 2 resources needed.

• 6+ years of experience working in technology audits, Risk, Information Security, or Information Technology.
• 2+ years of SOC or SOX IT control execution or testing.
• Experience using GRC tools such as Team Mate, Wdesk, or Archer is preferred but not required.
• Bachelor’s degree in a related field is strongly desired.
• Security, risk, and audit specialized training highly recommended.
• Professional Certification strongly preferred but not required if demonstrated equivalent work experience:
  Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC).

• Demonstrated experience in Risk and Control Self Assessments, Audits, or exams for technology or information security.
• Demonstrated ability to audit general IT controls including related infrastructure (Active Directory), operating systems (UNIX, Linux, Windows), databases (Oracle DB and MS SQL DB), and applications (Oracle, People Soft, Salesforce, etc.).
• Design and perform root cause analysis, control gap assessments, and process improvement projects using technical and problem solving and critical thinking skills.
• Understand industry standard frameworks for technology, such as COBIT, ISO, NIST, SANS, and others to design Governance, Risk and Control frameworks, and systems for technology and information security.
• Design and develop internal control documentation including narratives, process and data flows, and other supporting work papers.
• Have moderate to in-depth understanding of business environment and risks associated with the financial services industry, IT environments, and information dataflow.
• Understand IT audit principles and audit procedures, evaluate severity of potential issues identified during testing, and provide guidance to junior team members.
• Understand IT organization business processes and systems (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).
• Participate in multiple projects concurrently, work under pressure well.
• Strong verbal and written communication skills and comfort presenting new ideas and presentations to senior management.
• Demonstrated track record of meeting time commitments.
• Demonstrated track record of working effectively across functional and organizational lines.
• Demonstrated knowledge of risk management tools.
• Ability to work in teams, and/or as an individual contributor.

• SOX audit, SOC1, SOC2, IT audit.
• Experience with GRC tools.

• Expert Level experience.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.