Sr. Technology Risk Analyst

RLI Insurance•Peoria, IL

About The Position

Under general management, the Sr. Technology Risk Analyst supports administration of the company’s information technology and cybersecurity auditing processes. The role ensures IT audits consider appropriate confidentiality, integrity, and availability risks; facilitates and participates in IT audit execution; and applies knowledge of products and processes related to IT auditing in advisory work. The analyst helps ensure audits address operational, financial, compliance, fraud, and technological risks. The role leads audit documentation and walkthroughs, oversees risk assessments, develops and executes audit programs using data analytics tools, collaborates with management to resolve audit issues, follows up on remediation, and reviews others’ work. It also maintains business knowledge of cybersecurity, IT, and related business processes through regular discussions with management, and leads advisory reviews evaluating IT risks and controls for new technology implementations.

Requirements

Typically requires a bachelor’s degree in information technology, cybersecurity, information science, business information systems, or a related field, or equivalent education and experience.
Ability to use analytical methods in auditing to understand relationships, check facts, and find creative yet workable solutions.
Ability to generate innovative solutions within the auditing process.
Ability to communicate effectively through written and verbal means.
Ability to use spreadsheet software to summarize and analyze large amounts of data.
Ability to maintain the highly confidential nature of sensitive information.
Ability to participate on one or more concurrent audit projects.
Knowledge of RLI people, processes, and systems and the insurance industry, or related experience.

Nice To Haves

5+ years of information technology, information security, or networking experience.
Certified Information Systems Auditor (CISA), an advanced degree, or Certified Information Systems Security Professional (CISSP) designation.

Responsibilities

Ensure IT audits consider appropriate operational, financial, compliance, fraud, and technological risks.
Facilitate audit execution in accordance with the RLI audit methodology.
Lead the composition of audit narratives and workflows.
Perform walkthroughs and oversee risk assessments.
Develop and execute audit programs, including use of data analytic tools.
Collaborate with management to address audit issues and follow up to ensure they are addressed.
Review the work of others.
Maintain business knowledge regarding cybersecurity, information technology processes, and related business processes, including meeting regularly with management to discuss relevant issues.
Lead audit advisory review projects, including evaluation of IT risk and controls for implementation of new technology.

Benefits

Annual bonus plans.
Employee stock ownership plan (ESOP).
401(k) with automatic 3% company contribution.
Annual 401(k) and ESOP profit-sharing contributions, up to 15% of eligible earnings.
Paid time off and holidays.
Paid volunteer time off.
Parental and family care leave.
Flexible and hybrid work arrangements.
Fitness center discounts and a free virtual fitness platform.
Employee assistance program.
Medical, dental, and vision benefits.
Flexible spending and health savings accounts.
Group life and AD&D insurance equal to 2x base salary.
Voluntary life, critical illness, and accident insurance for purchase.
Short-term and long-term disability benefits.
Training and certification opportunities.
Tuition reimbursement.
Education bonuses.
Educational opportunities and professional development programs, with RLI covering the cost of most programs and employees typically earning a bonus upon successful completion of approved courses and certifications.