Mijn persoonlijke interesses

Security Compliance Analyst

Home »  Aanvragen »  IT-Staffing »  Security Compliance Analyst

Security Compliance Analyst

On juli 25, 2018, Posted by , In IT-Staffing, By ,, , With Reacties uitgeschakeld voor Security Compliance Analyst

[ad_1]

General position definition
The Report One Controls Improvement project aims to design, implement and embed an effective and sustainable IT control framework for Report One, that is aligned to Group standards and strategy, future proof and as easy to operate as possible. The ultimate goal is to deliver a fit-for-purpose and sustainable control framework across the landscape. 

This is a project role where the incumbent will participate together with a team of 6-8 staff in an agile environment. Flexibility is key and responding to issues with the right priority is essential to ensure project success.

Position description
The Controls Analyst will be required to work primarily on designing, documenting, improving and implementing controls within the landscape. This requires a thorough knowledge of the system and application architecture, data flows and support processes used. Much of this knowledge will need to be gained through interaction with the relevant teams e.g. architects, risk analysts, and technical staff.

Accountabilities:
Evaluate existing controls and implement improvements to increase efficiency of control operation via automation or standardization, without reducing assurance levels.
1.    Analyse existing Control Procedures and Work Instructions.
2.    Identify redundancies, gaps and opportunities for automation.
3.    Work with the relevant stakeholders to develop plans to implement the improvements.
4.    Drive the improvement activities according to plan.
5.    Define metrics to record the efficiency gains and measure the gains achieved through the improvements.

Participate in testing and remediation activities of the controls.
6.    Schedule and co-ordinate Design Effectiveness and Operating Effectiveness testing of Controls, including any QA that may be required.
7.    Advise and co-ordinate remediation activities:

  • Assess the impact
  • Determine root causes
  • Develop and drive implementation of robust remediation actions
  • Assess residual risks, ensure appropriate acceptance
  • Co-ordinate retest of controls

Design control procedures to mitigate risks identified:
8.    Liaise with the relevant support organisations to determine and confirm support procedures to be used.
9.    Leverage where possible use of Enterprise wide support procedures and controls as defined by IT Delivery Model.
10.    Design fit for purpose Control Procedures together with the relevant control operator community.
11.    Document Control Procedures and Work Instructions.
12.    Set up document repositories to capture evidence.
13.    Provide training where required.

[ad_2]

Source link

Comments are closed.