Job DescriptionThe Senior IT Risk, Security, and Compliance Analyst is an individual contributor responsible for supporting the security, compliance, and risk posture of business applications within the R&D IR portfolio. The role partners cross-functionally with risk, security, compliance, and business and IT stakeholders to facilitate initiatives that reduce risk, strengthen control effectiveness, and enable successful delivery of related projects. Key outputs include maintaining accurate program data, monitoring performance against objectives, supporting risk reduction activities, and contributing to the identification, development, and implementation of system enhancements that improve security, compliance, and operational effectiveness across the portfolio.
Responsibilities:- Ensure compliance with applicable corporate, organizational, and regulatory policies and procedures.
- Build and maintain relationships across BTS and business functions.
- Work with compliance leads to facilitate accurate interpretation of system compliance requirements within assigned project areas and supports teams in executing required compliance activities in accordance with applicable policies and procedures.
- Support the security, risk, and compliance posture of business applications within the R&D IR portfolio by coordinating activities that align with enterprise standards, regulatory expectations, and internal control requirements.
- Partner with business, IT, security, risk, compliance, and application stakeholders to communicate project needs, clarify requirements, and support delivery of risk reduction and compliance-related initiatives.
- Support execution of control, compliance, and risk management processes, including evidence collection, control monitoring, access or recertification support, and remediation tracking as applicable.
- Understand and clearly communicate defined objectives, milestones, remediation plans, risks, issues, gaps, or delays and communicate status to appropriate stakeholders.
- Contribute to the preparation of clear status updates, metrics, dashboards, and reports that communicate progress, risks, decisions, and outcomes to management and stakeholders.
- Promote a culture of compliance, accountability, and continuous improvement by applying sound judgment, attention to detail, and effective collaboration across the organization.
Qualifications- Bachelor's degree in Information Systems or related field and 5 years' experience OR Master's degree and 4 years' experience is required.
- Experience in the systems development, implementation, IT security controls and frameworks, and operations of a large-scale enterprise system.
- Excellent interpersonal skills and well-developed verbal and written communication skills.
- Must be able to effectively lead and facilitate meetings with customers and technical team members.
- Must be deliverables focused and detail oriented.
- Must exhibit exceptional teamwork skills.
- Must have a strong customer focus.
Additional InformationApplicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:
- The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
- We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
- This job is eligible to participate in our short-term incentive programs.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law.
