Sr. Technology Risk Analyst
About The Position
Under general management, the Sr. Technology Risk Analyst supports administration of the company’s information technology and cybersecurity auditing processes. The role ensures IT audits address appropriate confidentiality, integrity, and availability risks and facilitates or participates in audit execution. It also requires maintaining business knowledge of products and processes relevant to IT auditing and applying that knowledge in advisory work. The analyst helps ensure audits consider operational, financial, compliance, fraud, and technology risks; leads audit documentation and workflow development; performs walkthroughs and oversees risk assessments; develops and executes audit programs, including the use of data analytics tools; collaborates with management on audit issues and follows up on remediation; and reviews others’ work. The position also keeps current on cybersecurity, IT, and business processes through regular discussions with management, and leads advisory reviews assessing IT risks and controls for new technology implementations.
Requirements
- Typically requires a bachelor’s degree in information technology, cybersecurity, information science, business information systems, or a related field, or an equivalent level of education and experience.
- Ability to use analytical methods to understand relationships, check facts, and find creative, workable solutions.
- Ability to generate innovative solutions within the auditing process.
- Ability to communicate effectively in writing and verbally.
- Ability to use spreadsheet software to summarize and analyze large amounts of data.
- Ability to maintain the highly confidential nature of sensitive information.
- Ability to participate in one or more concurrent audit projects.
- Knowledge of RLI people, processes, and systems and the insurance industry, or related experience.
Nice To Haves
- 5+ years of information technology, information security, or networking experience.
- Advanced degree.
- Certified Information Systems Auditor (CISA) designation.
- Certified Information Systems Security Professional (CISSP) designation.
Responsibilities
- Ensure IT audits address appropriate operational, financial, compliance, fraud, and technological risks.
- Facilitate audit execution in accordance with RLI’s audit methodology.
- Lead the composition of audit narratives and workflows.
- Perform walkthroughs and oversee risk assessments.
- Develop and execute audit programs, including the use of data analytic tools.
- Collaborate with management to address audit issues and follow up to ensure they are resolved.
- Review the work of others.
- Maintain business knowledge of cybersecurity, information technology processes, and related business processes, including meeting regularly with management to discuss relevant issues.
- Lead audit advisory review projects, including evaluating IT risks and controls for new technology implementations.
Benefits
- Annual bonus plans.
- Employee stock ownership plan (ESOP).
- 401(k) with automatic 3% company contribution.
- Annual 401(k) and ESOP profit-sharing contributions of up to 15% of eligible earnings.
- Paid time off and holidays.
- Paid volunteer time off.
- Parental and family care leave.
- Flexible and hybrid work arrangements.
- Fitness center discounts and a free virtual fitness platform.
- Employee assistance program.
- Medical, dental, and vision benefits.
- Flexible spending and health savings accounts.
- Group life and AD&D insurance at 2x base salary.
- Voluntary life, critical illness, and accident insurance available for purchase.
- Short-term and long-term disability benefits.
- Training and certification opportunities.
- Tuition reimbursement.
- Education bonuses.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
