IT Compliance Analyst

Danaher Corporation•Concord, ON

5d•Onsite

About The Position

The IT Compliance Analyst is responsible for acting as the intermediary between internal or external regulatory bodies and IT, using a deep understanding of regulatory requirements, business processes, and technology to ensure desired outcomes are achieved. They will design and implement efficient and effective solutions for ensuring compliance with key regulatory requirements within IT, including Sarbanes-Oxley, Payment Card Industry Data Security Standards, GDPR, and the Danaher Information Security Policy. This position reports to the Senior Manager, IT Security & Compliance and is part of the IT department located in Concord, Ontario, Canada; this will be an on-site role. In this role, you will have the opportunity to: Translate Compliance into Action: Use a risk-based approach to identify and articulate actionable information security and regulatory requirements for IT and business associates; implement and execute a workflow-driven compliance task management. Drive Process Efficiency: Leverage DBS principles, data analytics, and automation to design and implement repeatable, efficient, and continuously improving compliance processes. Consult and Collaborate: Provide consultative support for IT and business initiatives to ensure compliance, lead SMEs in regulatory adherence including coaching on appropriate audit protocols, and coordinate with Danaher Corporate and other operating companies to standardize compliance practices. Monitor and Adapt: Proactively track regulatory, industry, and technology trends to enhance IT compliance effectiveness, champion use of compliance maturity models to identify areas of improvement and coordinate the remediation of noncompliant activities; this includes the review of security access, training and documentation. Audit and Oversight: Serve as the primary liaison for internal/external auditors, ensure proper control design and evidence provided to prove regulatory compliance, and develop and maintain effective visual management for IT leadership visibility.

Requirements

A minimum of 2 years of experience in IT, Finance, or QA/RA, with a strong familiarity with regulatory requirements impacting IT or Finance
Degree or diploma in a business or technical field such as Information Systems, Business, or Sciences
Excellent communication and presentation skills with the ability to engage users across varying levels of the organization, with differing levels of regulatory and technical expertise

Nice To Haves

Experience working directly with external regulatory auditors is preferred
Strong understanding of regulatory control frameworks, including SOX, PCI, General Compliance and the Danaher IT SOX Workbook

Responsibilities

Act as the intermediary between internal or external regulatory bodies and IT.
Design and implement efficient and effective solutions for ensuring compliance with key regulatory requirements within IT, including Sarbanes-Oxley, Payment Card Industry Data Security Standards, GDPR, and the Danaher Information Security Policy.
Use a risk-based approach to identify and articulate actionable information security and regulatory requirements for IT and business associates.
Implement and execute a workflow-driven compliance task management.
Leverage DBS principles, data analytics, and automation to design and implement repeatable, efficient, and continuously improving compliance processes.
Provide consultative support for IT and business initiatives to ensure compliance.
Lead SMEs in regulatory adherence including coaching on appropriate audit protocols.
Coordinate with Danaher Corporate and other operating companies to standardize compliance practices.
Proactively track regulatory, industry, and technology trends to enhance IT compliance effectiveness.
Champion use of compliance maturity models to identify areas of improvement.
Coordinate the remediation of noncompliant activities; this includes the review of security access, training and documentation.
Serve as the primary liaison for internal/external auditors.
Ensure proper control design and evidence provided to prove regulatory compliance.
Develop and maintain effective visual management for IT leadership visibility.