Audit & Risk Mgmt Consultant (Remote EST CST or MST)

Renishaw•Montana, CT

1d•$104,900 - $174,700•Remote

About The Position

About the Business LexisNexis Risk Solutions is the essential partner in the assessment of risk. Within our Government vertical, our solutions assist government agencies and law enforcement to drive insights from complex data sets, improving operation efficiency, increasing program integrity, discovering, and recovering revenue, and making timely and informed decisions to enhance investigations. You can learn more about LexisNexis Risk at the link below. https://risk.lexisnexis.com/government About our Team The Government Security Compliance team supports Federal and State & Local agencies in ensuring compliance with data integrity and confidentiality standards. The team collaborates across functions to conduct comprehensive security audits, maintain compliance with relevant industry requirements, and address regulatory changes within the organization. About the Role Ensuring security compliance is essential for the daily operations of every organization. Are you ready to elevate your career by ensuring top-notch security compliance in a dynamic and innovative company? If this is you, come be a part of a dynamic team supporting world class solutions for the government. Only candidates in Eastern, Central, or Mountain time zones will be considered due to client’s location and regular interactions with them.

Requirements

Bachelor’s Degree in MIS, Computer Science, or Legal Studies
IT or Security experience (such as development, QA, system administration) preferred
Strong written and verbal communication skills
Ability to research technologies, system controls, and audit topics online
Proficiency with Microsoft Access, PowerPoint, Excel, and Word
Progress towards CISA or CIPP certification
US Citizenship required
Ability to travel 25%
Physical and/or logical access to criminal justice information is an essential function of this role. The successful candidate will be required to pass both the standard company background check for all employees and an enhanced criminal background check conducted by the Company’s state and local law enforcement partners conducted in compliance with the FBI’s Criminal Justice Information System (“CJIS”) security policy. Employees in this role may also be subject to ongoing criminal background checks as required by the Company’s state and local law enforcement partners. Candidates and/or employees who are not certified by state and local law enforcement to access criminal justice information will not be able to perform the essential functions of this role. Employees who subsequently fail to obtain or maintain CJIS compliance may be reassigned or terminated.

Responsibilities

Conduct internal and customer audit and security assessment requests to document compliance with the FBI’s CJIS Security Policy.
Work with agencies to determine audit and assessment requirements, develop project plans with milestones, and ensure completion with minimal supervision.
Identify risks and issues and facilitate their resolution.
Participate in project meetings to provide updates and deliverables.
Track audit and assessment follow-up and remediation activities with POAM documentation.
Liaise with internal teams to enhance understanding of the FBI's CJIS Security Policy (CSP).
Coordinate with third-party auditors to ensure timely delivery and accuracy of documentation, arrange meetings with control owners, gather audit evidence, and prepare work papers.
Identify control gaps and recommend process improvements to the Director of Security and Compliance.
Collaborate with the internal data protection teams for implementation of remediation and control improvements and support the privacy programs group in maintaining inventories of applications and systems in scope for assessments, updated annually.
Represent CJIS requirements in product development and go-to-market initiatives.
Lead, manage, coordinate, track, and identify gaps for all compliance assessments including PCI DSS, SOC 1, SOC 2, and NIST, applying the same level of rigor and oversight as with CJIS assessments.