IT Governance, Risk and Compliance

Job Description

​

The IT GRC Analyst is an experienced professional with some knowledge of and experience with IT Governance, Risk, and Compliance (GRC) principles, practices, concepts, and theories. Tests adherence to Cleco’s information security policies, standards, and procedures. Ensures Cleco’s IT governance processes are properly designed and functioning effectively, and the organization maintains its compliance with all applicable legal, regulatory, and contractual requirements. Responsible for ensuring the effectiveness of all IT General Controls (ITGCs). Serves as a direct point of contact between IT and internal / external auditors to provide leadership in managing auditing activities, requests and developing responses to audit findings. Responsible for the completion of assigned processes or activities, requiring interpretation of ITGC practices. Contributes to identifying improvements to ITGC activities and procedures. Assists in the development and onboarding of entry-level IT employees through coaching, mentoring and knowledge sharing.

Key Responsibilities

Champions a corporate culture that emphasizes transparency, integrity, safety, environmental responsibility, employee development, diversity and inclusion, customer service, and operational excellence.Ensures that Cleco is properly evaluating cybersecurity risks through a risk assessment framework that assesses the potential impact of threats to the business and Cleco’s vulnerability to these threats and recommends controls to reduce risks to levels that align with the organization's risk tolerances and appetite.Conducts and documents an annual enterprise cybersecurity risk assessment as well as ad hoc project risk assessments.Collects information for generating and communicating responses to compliance-related requests and questionnaires.Assists in Cleco’s vendor management / third party service provider oversight program and conducts initial vendor due diligence as well as ongoing vendor reviews as they relate to cybersecurity risks.Works with IT team to ensure IT policies, procedures, standards and ITGC are reviewed and updated in order to remain current over time. Assesses IT compliance with Cleco’s policies and standards and takes action to remediate non-compliance. Escalates issues to management as necessary.Identifies compliance objectives and maps program deliverables to the requirements.Utilizes ITGC standards, procedures, and processes, providing recommendations for process improvements, as necessary.Ensures that Cleco’s practices satisfy the requirements of the Sarbanes-Oxley Act.Provides technical execution of defined activities to support the delivery of project initiatives required to achieve efficiency, effectiveness, and innovation objectives.Advises project teams on the interpretation and application of ITGC and IT policies and standards.Works collaboratively with all Cleco departments to ensure that local practices are consistent with IT policies and standards.

Qualifications

Required Education, Skills & Experience

Bachelor’s degree3-5+ years of related working experience writing IT policies and procedures, familiarity with cyber security frameworks such as NIST and/or CSF and working knowledge of technology riskReport to the Pineville General Office every Tuesday, Wednesday, ThursdayStep progression levels based on skill proficiency and scope of jobStrong business acumen pertaining to the Utility industry preferredStrong knowledge of leading GRC practicesStrong planning and project management skillsGeneral understanding of IT profit and loss targets and operating budgetWillingness and ability to learn new technologies on the jobProficient at functioning effectively within a team environment, presents ideas and opinions in a respective and collegial manner

Licenses and Certifications

CISA certification preferred

Key Competencies

BEHAVIORAL

Balances stakeholdersBuilds effective teamsBusiness insightCommunicates effectivelyCourageDemonstrates self-awarenessDrives ResultsDrives vision and purposeEnsures AccountabilityInstills trustNimble learningPlans and AlignsSafetyStrategic mindset

TECHNICAL

Analytical skillsComplianceComputer SkillsBusiness PartneringApplication DevelopmentArchitectureBusiness Requirements AnalysisDatabase AdministrationHardware ManagementIT Data ManagementIT Implementation and integrationIT SupportIT TestingNetwork/IT Security

Salary dependent on experience, skills, education, and training.

---