IT GRC Analyst 3

Description

• Reporting and communication of ITGC compliance status to management
• Issue tracking and remediation
• Planning/organizing: Prioritizes and plans work activities, organizes personal and project timelines and deadlines, tracks project timelines and deadlines, and uses time efficiently.
• Framework alignment of COSO, NIST, ISO, & ITIL to ITGCs in support of Sarbanes-Oxley (SOX)
• Control development, testing, and monitoring
• Stakeholder coordination during development and updates of IT controls
• The employee frequently is required; to sit and stand; walk; bend, use hands to operate office equipment; and reach with hands and arms.
• Policy and procedure development for IT General Controls and related functions
• Problem solving: Identifies and resolves problems in a timely manner, gathers and reviews information appropriately. Uses own judgment and acts independently; seeks input from other team members as appropriate for complex or sensitive situations.

Requirements

• Industry Requirements: Eligible to work under Department of Energy 10 CFR Part 810.
• Ability to learn new job functions and comprehend and understand new concepts quickly and apply them accurately in a rapidly evolving environment.
• Ability to understand and communicate clearly using a phone, personal interaction, and computers.
• Oral/written communication: Listens carefully and speaks clearly and professionally in all situations. Edits work for accuracy and clarity, is able to create, read and interpret complex written information. Ability to develop strong interpersonal networks within the organization.
• Adaptability: Adapts to changes in the work environment, manages competing demands and is able to deal with frequent interruptions, changes, delays, or unexpected events.
• Quality Assurance: Demonstrates understanding and implementation of quality assurance regulations, standards and guidelines of 10 CFR 50 Appendix B, 10 CFR 21, and ASME NQA-1.
• Education: A Bachelor’s degree in Computer Science, Business Information Systems, Cybersecurity, or related field is required. Alternatively, 4 additional years (9 years total) of full-time, directly relevant working experience may be considered in lieu of a 4-year degree.
• Safety Culture: Adheres to the NuScale Safety culture and is expected to model safe behavior and influence peers to meet high standards.
• Ability to travel nationally and internationally using common forms of transportation.
• Team Building: Capable of developing strong interpersonal networks and trust within the organization.
• Experience: A minimum of 5 years of full-time working experience in IT environment with at least 2 of those years specific to audit, compliance, risk management, or security. Hands on work with risk assessment, control testing, risk management, and policy development. Knowledge of software used in the performance of GRC activities such as Oracle RMC, Azure identity governance, privileged access management, user access reviews, and model-based system engineering are preferred.
• Dependability: Consistently on time and at work, responds to management expectations and solicits feedback to improve performance.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance