IT Analyst, Information Security (Hybrid)

Eversource•Berlin, CT

36d•Hybrid

About The Position

Responsible for the development and implementation of the software governance program including: internal testing of IT control standards, and control procedures through facilitation and coordination of test of design, test of operation, and certifications, as required, for multiple platforms and various system environments. Provides direct support for new system implementations ensuring compliance with Eversource's General IT Controls and Security Protocols.

Requirements

Technical IT audit knowledge for establishing in house controls aligned to COBIT, NIST and other industry standards while mitigating risks of the company's IT Security and General Computing Control framework. Familiarity with COBIT, NIST standards.
Full understanding of applicable state and federal legislation and industry specific regulations.
Risk assessment ability and internal audit experience
Excellent communication and interpersonal skills; good report writing skills
Knowledge of IT security and infrastructure
Knowledge of operating system platforms
Excellent analytical skills
Four-year college degree from an accredited institution; Bachelor's Degree in Business, Accounting, IT, or related field with focus on information systems or related experience
Minimum of five (5) years related experience with a minimum of two years of relevant work experience in software governance
Strong knowledge of IT general controls related to operations, information security and change management of systems software, application source code, network, and system database technologies
Experience testing automated and manual application controls; security testing experience required
Must be available to work emergency restoration assignment as required.
Must be available to travel between MA/CT/NH as necessary.

Responsibilities

Oversees policy, standards, guidelines, and control monitoring and testing of the software governance program.
Conducts process design, analysis, documentation, implementation and testing activities.
Analyzes communication and recommends troubleshooting/training (i.e., where appropriate for business process continuity).
Participates in the testing and evaluation of new products and processes.
Performs first level troubleshooting, analysis and monitoring of automated work processes for compliance to key security controls and practices.
Effectively communicates issues and/or concerns to stakeholders and audit management throughout the course of your work
Monitors implementation and completion of remediation efforts
Performs vendor and third-party risk assessments