Compliance Analyst

Contract to hire opportunity for a Compliance Analyst experienced with ITGC testing. Selected candidate should have experience with auditing and SOX experience required. Prefer candidates with one of these certifications; CISA, CPA, CISSP, CISA.

Compliance Analyst I

The Compliance Analyst position provides oversight of compliance, audit and regulatory risk reviews and acts a primary point of contact for business units, Second Line of Defense, and management. This position is responsible for providing regulatory expertise to team members and business units, ensuring ownership and validation of the Technology Process Risk and Control library, and is responsible for issue and change management identification and remediation including those that result from implementation of new regulations.

Position Responsibilities:

Technology Risk Management

Ensure key regulatory, internal, and external audit timelines are met; Associated documents are reviewed and submitted in alignment with process parameters. Engage with lines of business to promptly remediate regulatory exam and internal/external audit findings. Perform risk analysis to determine level of risk to the bank and recommend action(s) to mitigate risk. Assist in the development and implementation of new risk management assessments/activities to address regulatory changes, E.g. GLBA risk assessment, and post issue remediation efforts to ensure root cause remediated. Present results of risk activities verbally and in writing to business unit(s) and third-party processors as required. Support completion of Second Line of Defense risk assessments within the First Line of Defense, including the Risk and Control Self-Assessment.

Policies, Processes, and Procedures

Monitor and interpret policies, processes and procedures for assigned business units and support with updates/changes as required pending change and issue remediation, new/enhanced regulations and controls. Recommend ways to enhance internal processes. Analyze and make recommendations on department policies, processes and procedures. Partner with the business unit(s) to ensure all processes and procedures are in compliance with policies and federal regulations.

Committees and Special Projects

Management of and/or participation in medium to large sized projects related to risk and compliance. Work collaboratively with business units and others on the implementation of new regulations. Represent the business on risk and compliance committees as assigned.

Training and Reporting

Develop subject matter expertise on FFIEC, NIST, ISO, and COBIT Act as a resource for business units; educate and train business unit(s) on risks impacting them or their third-party processors. Ensure risk related training requirements are properly communicated and completed.