IT Risk Analyst

First Commonwealth Bank • Powell, OH

84d

About The Position

The position is focused on maintaining a high skill level of risk management and systems knowledge as it relates to the overall corporate technology environment. The primary responsibility is conducting the Information Technology (IT) risk assessment processes, which include asset identification, threat identification, mitigating control identification, and reporting of the IT asset's inherent and residual risk ratings across all Information Technology assets of the organization. The role involves ensuring all IT assets are identified and documented within the IT asset inventory/risk assessment for proper reporting of IT risk at an asset-based level. The candidate will work closely with various department subject matter experts to ensure that technology risks are appropriately identified and mitigating controls are effectively established, documented, and managed across all Information Technology assets. Additionally, the role includes conducting IT asset-based risk assessments on a cycle basis to identify recommendations for the treatment of risk not within the organization's risk appetite thresholds. Duties also encompass report development against IT asset inventory systems, conducting IT risk assessments, risk reporting, and the development and administration of IT risk management policies and procedures.

Requirements

• A bachelor's degree or equivalent experience is required.
• A minimum of two (2) years related experience in Information Systems, IT Risk and/or Information Security practices.
• A valid certification such as CISA and/or CRISC is preferred.
• In depth technical knowledge of the assigned systems and how the technical functions relate to processing is necessary.
• Proficient reading, writing, and grammatical skills are critical, as are analytical and mathematical skills.
• Excellent written and oral communication, organizational, and interpersonal relations skills are also required.
• A valid driver's license and the ability to travel are required.

Nice To Haves

• Experience with IT audit processes.
• Familiarity with change management policies and procedures.

Responsibilities

• Conducts risk assessments at an Information Technology asset-based level to identify the threats, mitigating controls and assign inherent and residual risk ratings.
• Performs administration and maintenance activities associated with the IT asset-based risk assessment solution and processes.
• Develops and maintains IT asset inventory reports used to create the scope of the IT asset-based risk assessment.
• Assists in developing and maintaining IT risk management policies and procedures.
• Develops IT risk assessment reporting and status updates for management and committees.
• Works with various department subject matter experts to identify, analyze and assess key risk scenarios and support stakeholders with risk analysis and reporting.
• Reviews and recommends suitable and appropriate, cost-effective controls or counter measures to address key technology risks not within the organization's risk appetite.
• Stays informed about emerging threats and vulnerabilities within the IT landscape.
• Acts as an intermediary between internal and external audit to coordinate and prepare audit documentation requests from various departments in a timely manner.
• Assists in the receipt, logging, and initial assessment of change requests to ensure they are complete and accurately documented.
• Facilitates communication between change requestors, IT teams and other stakeholders to ensure all parties are following the change management policies and procedures accurately.
• Monitors and reviews the results of implemented changes to ensure the required documentation is obtained while also identifying opportunities for potential improvements.
• Develops and cultivates effective relationships with other departments, vendors, and within the Technology Group.
• Maintains in depth knowledge of the technological assets used within the corporation and foreseeable IT threats in order to accurately identify potential risks and mitigating controls.
• Completes assigned tasks within established timelines and specifications.

Benefits

• May be eligible for telecommuting.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees