IT Risk & Compliance Analyst

RESPONSIBILITIES:
Kforce has a client in Tampa, FL that is seeking an IT Risk & Compliance Analyst.

Responsibilities:
* Coordinate efforts to implement SOX controls for in-scope SOX systems and processes; This entails coordinating discussions between stakeholders, validating evidence and driving completion of remediation efforts in a timely manner
* Ensures that quality methods and procedures are executed by the IT department to stay in compliance with regulatory requirements, Sarbanes-Oxley (SOX), PCI, contractual requirements
* Collect and sample evidence to support demonstration of compliance; Escalates out of compliance items to senior management; Additionally, analyst adheres to company confidentiality and security requirements
* Administers IT Compliance Management Systems and Governance, Risk, and Compliance (GRC) tool(s); Participate in the implementation of technology-based tools (e.g. GRC) to support IT risk initiatives
* Assist in information sharing activities with partner utilities including gathering of metrics and managing of surveys
* Documents non-compliance issues, provides recommendations and ushers remediation actions to ensure in their resolution
* Monitors and reports on exceptions, risks and exposures to IT senior management
* Conducting fact-based assessments of new and existing systems and technologies, Assessing the effectiveness of regulatory compliance controls; Providing subject matter expertise to help internal stakeholders manage risk and controls

REQUIREMENTS:
* 3+ years of IT security, IT audit or other controls experience
* Experience and knowledge with identifying control gaps, drafting remediation plans, ushering remediation action plans through completion
* Experience with SOX
* Assurance experience: Audit/IT compliance, compliance assessments, IT governance, GRC tools

Nice to Have Skills and Experience:
* CISA or CRISC Certifications
* Experience with PCI controls, NIST Cyber Framework
* Experience with the following: SAP, Service Now, AuditBoard, Splunk, Tenable, CyberArk, risk assessments, vulnerability assessments

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.