ETRA Sr Technology Risk Analyst

Fidelity Investments • Merrimack, NH

226d • Onsite

About The Position

Enterprise Technology Risk & Analytics (ETRA) group is seeking a passionate and driven professional to assist with coordination of regulatory operations and ETRA strategy and reporting activities. This role will require strong relationship and networking skills to collaborate with various teams including Enterprise Cybersecurity, Corporate Audit, Corporate Risk, Compliance, Vendor Management, Ethics Office and Enterprise Business Resiliency.

Requirements

• 4-6 years' experience in information technology risk, cyber security, controls or audit roles.
• Experience in regulatory controls is a plus.
• Bachelor's degree in computer science, technology, or a related field of study preferred.
• Professional technology and associated risk certifications a plus (CISSP, CISA, CRISC, CISM).
• Experience performing technology risk assessments, or IT Audits.
• Strong knowledge of information technology processes and controls and a comprehensive understanding of risk, quality control and assurance functions.
• Ability to build and maintain collaborative working relationships with business partners.
• Process orientation and understanding of operations and technology enabling support in the analysis, development and monitoring of controls.
• Knowledge of Industry standards, frameworks and best practices, such as NIST SP 800-53, COBIT, AICPA Trust Principles, ISO27001, HITRUST is preferred.
• Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer.
• Excellent verbal and written communication skills enabling preparation and presentation of recommendations to business partners.

Responsibilities

• Facilitates Top-Down Risk Assessments by entity and tracks application, database and server inventory by entity to meet regulatory requirements.
• Provides exam & client inquiry support.
• Tracks Internal Audit, SII, and PROE action plan progress, and coordinates/tracks Information Technology General Control (ITGC) assessment statuses.
• Completes quarterly KPI Reporting and coordinates monthly CIO Reporting.
• Supports the ETRA Brunch & Learn Series, Newsletter, etc.
• Performs all processing related to the NPH Program.
• Formulates/publishes/tracks annual Risk Mindset Training.
• Facilitates the tri-annual certification process for the Controls CoE.

Benefits

• Hybrid working model blending onsite and offsite work experiences.
• Diverse and inclusive workplace.
• Commitment to creating and nurturing a work environment that attracts the best talent.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree