Principal Analyst, IT Compliance

Carnival Corporation•Doral, FL

3h•Remote

About The Position

The Principal Analyst, IT Compliance is responsible for developing and documenting strategies which ensure that IT practices adhere to relevant laws, regulations, and industry standards, such as Sarbanes-Oxley (SOX) and Payment Card Industry (PCI) compliance. The Principal Analyst is a trusted advisor to senior management serving as the interface between IT, and both internal and external auditors. The Principal Analyst is the Subject Matter Expert in IT compliance, leading and conducting assessments of the most critical areas in the company, and presenting findings while also reviewing findings from internal and external auditors. The role will maintain absolute confidentiality of sensitive files, data and materials accessed, discussed, or observed while adhering to compliance policies and procedures.

Requirements

Bachelor's Degree in information technology, computer science, or related field or related equivalent work experience
7 years’ experience as an Auditor/assessor in a regulatory environment.
7 years’ experience conducting assessments specific to PCI and SOX.
7 years’ experience applying access controls and IAM principles.
7 years’ experience implementing and assessing segregation or separations of duties
7 years’ experience working in a compliance role as part of a large Information Technology department.
7 years’ experience documenting and communicating regulatory requirements, standards, policies, procedures, and vulnerabilities related to compliance.
7 years’ experience leading critical compliance projects.
5+ years experience participating in cross-functional technology teams.
5+ years experience planning and managing large projects.
5+ years experience as an Auditor for IT systems
CISA (Certified Information Systems Auditor) or CIA (Certified Internal Audit) certification

Nice To Haves

PMP (Project Management Professional)
CISM (Certified Information Security Manager)
CFSA (Certified Financial Systems Analyst)
CITGCP (Certified IT General Controls Practitioner
CSOXI (Certified Sarbanes Oxley Act Practitioner)
PCIP (Payment Card Industry Professional)
CISSP (Certified Information Systems Security Professional)
1+ year in the cruise and/or travel industry

Responsibilities

Lead and oversee assessments conducted by more junior analysts, reviewing evidence demonstrating the organization’s compliance with applicable laws, regulations, and industry standards.
Interview stakeholders to ensure compliance requirements are met and understood.
Review policies, procedures, and controls to ensure alignment with requirements.
Act as a decision maker in working with cross-functional teams to resolve compliance issues.
Represent IT in communicating compliance related work product to internal and external stakeholders and executive leadership.
Function as a SME for IT Compliance.
Stay abreast of emerging technologies, industry trends, and best practices.
Research new tools, frameworks, and methodologies that can enhance solution designs and delivery.
Evaluate and recommend appropriate solutions.
Develop and communicate technology roadmaps.
Review and improve tools, methods, processes, and procedures.
Lead ongoing compliance activities, track regulatory changes, and prepare reports for management and regulatory agencies.
Document compliance findings, issues, and serve as the decision maker for remediation efforts.
Conduct impact assessments to determine the impact of regulatory changes and report findings to leadership.
Assess compliance-related risks and lead the development of risk mitigation strategies.
Stay abreast of regulatory changes and industry developments to ensure compliance programs remain current and effective.
Build processes that drive automation and continuous compliance monitoring.
Conduct internal assessments and reviews to evaluate the effectiveness of controls and identify areas for improvement.
Review access controls, data protection measures, and security configurations.
Lead the response to both Internal and External Audits and other stakeholder's findings and inquiries, preparing and presenting official documentation where appropriate.
Act as the top expert in compliance policies, standards, and procedures.
Provide training and awareness programs to educate analyst team and stakeholders about compliance requirements and best practices.
Take the lead in developing, reviewing, and updating IT policies, procedures, and standards to address compliance requirements.
Review and approve documents such as acceptable use policies and data retention policies plans.
Represent the department in communicating policies and procedures to stakeholders and executive leadership.
Provide oversight and decision making in vendor selection, assess the compliance of vendors and third-party service providers to ensure they meet all security and regulatory requirements.
Oversee audits of third-party service providers and lead the work to resolve vendor issues.
Performs other duties as assigned.

Benefits

Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Company paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
Annual cash bonus program