IT GRC Analyst 3

Description

• Stakeholder coordination during development and updates of IT controls
• Control development, testing, and monitoring
• Framework alignment of COSO, NIST, ISO, & ITIL to ITGCs in support of Sarbanes-Oxley (SOX)
• Issue tracking and remediation
• Policy and procedure development for IT General Controls and related functions
• Problem solving: Identifies and resolves problems in a timely manner, gathers and reviews information appropriately. Uses own judgment and acts independently; seeks input from other team members as appropriate for complex or sensitive situations.
• Reporting and communication of ITGC compliance status to management
• The employee frequently is required; to sit and stand; walk; bend, use hands to operate office equipment; and reach with hands and arms.
• Planning/organizing: Prioritizes and plans work activities, organizes personal and project timelines and deadlines, tracks project timelines and deadlines, and uses time efficiently.

Requirements

• Dependability: Consistently on time and at work, responds to management expectations and solicits feedback to improve performance.
• Oral/written communication: Listens carefully and speaks clearly and professionally in all situations. Edits work for accuracy and clarity, is able to create, read and interpret complex written information. Ability to develop strong interpersonal networks within the organization.
• Quality Assurance: Demonstrates understanding and implementation of quality assurance regulations, standards and guidelines of 10 CFR 50 Appendix B, 10 CFR 21, and ASME NQA-1.
• Industry Requirements: Eligible to work under Department of Energy 10 CFR Part 810.
• Education: A Bachelor’s degree in Computer Science, Business Information Systems, Cybersecurity, or related field is required. Alternatively, 4 additional years (9 years total) of full-time, directly relevant working experience may be considered in lieu of a 4-year degree.
• Experience: A minimum of 5 years of full-time working experience in IT environment with at least 2 of those years specific to audit, compliance, risk management, or security. Hands on work with risk assessment, control testing, risk management, and policy development. Knowledge of software used in the performance of GRC activities such as Oracle RMC, Azure identity governance, privileged access management, user access reviews, and model-based system engineering are preferred.
• Ability to learn new job functions and comprehend and understand new concepts quickly and apply them accurately in a rapidly evolving environment.
• Team Building: Capable of developing strong interpersonal networks and trust within the organization.
• Ability to understand and communicate clearly using a phone, personal interaction, and computers.
• Ability to travel nationally and internationally using common forms of transportation.
• Safety Culture: Adheres to the NuScale Safety culture and is expected to model safe behavior and influence peers to meet high standards.
• Adaptability: Adapts to changes in the work environment, manages competing demands and is able to deal with frequent interruptions, changes, delays, or unexpected events.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance