Senior IT Risk & Compliance Analyst - IT Risk Management

The TJX Companies, Inc.•Framingham, MA

43d•Onsite

About The Position

Join our team! We are seeking a Senior IT Risk & Compliance Analyst to enhance our growing IT Risk Management team. As a subject matter expert, you will play a crucial role in our Information Technology Risk Assessment Program. TJX IT is evolving from a compliance-driven organization to one that proactively focuses on risk management. This is a global role based in the US, and some travel requirements may be negotiable. Successful candidates will demonstrate: Ability to identify, assess, and communicate risks effectively. Capable of weighing likelihood, effectiveness of existing safeguards to make informed decisions. Works well with others to manage IT Risks and fosters teamwork. Leads complex risk and compliance reviews and assessments. Develops and communicates new workflows and processes. Evaluates and ensures alignment with IT standards and policies. Strong critical thinking skills and implements solutions with guidance. Effective communication with supervisors, team members, and stakeholders. Identifies and leads improvements in processes. Our team is looking for people who put our internal customers first, are passionate about delivering value without compromising associate experiences, not afraid to try new things in order to seek improvements and 100% outcome focused. Our teams span multiple time zones and cultures, so inclusivity is a must, working within and developing a team with varied strengths through inclusive behaviors is encouraged.

Requirements

Experience and expertise in IT Governance, Risk, Compliance Management, at least 3 years in leading and conducting the IT Risk Assessments.
A Bachelor's degree in Computer Science, Cyber Security, or a related field, or equivalent experience.
Strong knowledge of IT policies, laws, standards, and frameworks (e.g., ISO31000, ISO27000, PCI DSS, COSO, NIST).
CISSP or CRISC certifications highly desired. CGRC or CISA with related IT experience
Excellent understanding of modern IT Risk & Compliance concepts and methodologies.
Proven ability to assess customer needs, creatively approach solutions, and decide on appropriate actions.
Knowledge of IT industry trends and emerging technologies.

Nice To Haves

Familiarity will GRC technology platforms ( e.g., ServiceNow, Archer, etc.)

Responsibilities

Ability to identify, assess, and communicate risks effectively.
Capable of weighing likelihood, effectiveness of existing safeguards to make informed decisions.
Works well with others to manage IT Risks and fosters teamwork.
Leads complex risk and compliance reviews and assessments.
Develops and communicates new workflows and processes.
Evaluates and ensures alignment with IT standards and policies.
Strong critical thinking skills and implements solutions with guidance.
Effective communication with supervisors, team members, and stakeholders.
Identifies and leads improvements in processes.