Risk & Compliance Analyst Sr IT

The Risk & Compliance Analyst Sr IT will be responsible for defining and implementing a leading practice IT internal controls within Stericyclea??s IT environment and driving a control conscious and compliant organization.

a? Support control owners through the full management of IT SOX audit cycle, including assisting control owners through continuous improvement of controls, maintaining the IT SOX control framework, facilitating management prep sessions, and helping to validate that audit evidence is complete and accurate prior to providing to the auditors.

a? Builds and maintains positive working relationships with stakeholders, including application, process, and control owners along with management in support of IT Risk and Compliance processes and practices

a? Gains knowledge and understanding of SAP S/4, SuccessFactors, Salesforce, Descartes, Coupa, Concur and other legacy systems for IT SOX controls.

a? Performs targeted risk assessments and provide recommendations to Control Owners.

a? Participates in scoping activities for IT SOX applications, systems changes and business transformation projects.

a? Contributor to the design and implementation of enhancements for internal controls such as segregation of duties, change management, access management, IT operations, workflow, and application configuration, etc.

a? Assists IT SOX process by validating that audit evidence is complete and accurate prior to providing to the auditors.

a? Identifies, communicates and coordinates efforts to resolve control exceptions.

a? Drive continual improvement of the IT SOX governance program through the development of training, facilitation of SOX auditors and creation of support materials and processes for Control Owners.

a? Reviews deficiencies identified during audit or internal assessments and collaborates with the IT Risk & Compliance team to develop and execute remediation plans

a? Supports IT policy steering committee with senior level management to develop IT policies, provide guidance, ensure consistency, and facilitate roll out and maintenance of corporate IT policies.

a? Supports IT GRC steering committee intend to continuously improve controls with senior level management

a? Supports user entitlement reviews using homegrown tools built on Alteryx and Outsystems.

a? Acts as a liaison to internal/external auditors, fulfilling audit requests and coordinating audit activities with IT stakeholders including the integrated audit and facilitation of SOC-1 reviews of Stericycle.

a? Assist management with remediation plan development, execution and support for control owners

a? Participate in IT SOX walkthroughs, to act as a??knowledge resourcea? and to gain an understanding of the current processes and controls

a? Maintain status reports and key metrics to support the IT Risk and Compliance function.

a? Perform other duties and responsibilities, as assigned.

a? Bachelor's degree in Information Systems, Computer Science, Accounting, Business or related technical discipline (or equivalent)

a? 5+ years of relevant work experience

a? Familiar with leading practice IT controls frameworks and audit methodologies and IT industry standards (e.g., COSO 2013, COBIT, ISO, CMM, ITIL, PCI, NIST, SSAE 18 SOC, etc.)

a? Strong understanding of regulatory concerns especially IT Sarbanes Oxley (IT SOX)

a? Intermediate knowledge of evaluating internal controls, developing recommendations, designing and implementing solutions

a? Previous internal or external audit experience a plus

a? SAP functional knowledge a plus

a? CISA, CISM, CIA, CPA certifications a plus

a? Intermediate to advanced skills and hands-on experience in building tools and presentations with Microsoft Word, Excel, PowerPoint, Project, Access

a? Basic knowledge of project management principles (planning, organizing, and managing assessment process)

a? Strong interpersonal skills with the ability to work effectively in a matrixed organization

a? Ability to work with teams that are geographically distributed and work across different time zones

a? Able to work in a fast-paced environment, both independently and lead a team

a? Ability to manage and collaborate with onshore and offshore cross-functional teams

a? Strong analytical ability, critical thinking, decision making, judgment and problem analysis techniques

a? Excellent communication skills (verbal, written, and listening)

a? Excellent time management, prioritization and multi-tasking skills

a? Directing Others a?? Is good at establishing clear directions. Sets stretching objectives. Distributes the workload appropriately. Lays out work in a well-planned and organized manner. Maintains two-way dialogue with others on work and results. Brings out the best in people. Is a clear communicator.

a? Managing and Measuring Work a?? Clearly assigns responsibility for tasks and decisions. Sets clear objectives and measures. Monitors process, progress and results. Designs feedback loops into work.

a? Building Cross-functional Effective Teams a?? Blends people into teams when needed. Creates strong morale and spirit in his/her team. Shares wins and successes. Fosters open dialogue. Allows people finish and be responsible for their work, holds people accountable. Defines success in terms of the whole team.

a? Total Work Systems (e.g. TQM/ISO/Lean/Six Sigma) a?? Is dedicated to providing organization or enterprise-wide common systems for designing and measuring work processes. Seeks to reduce variances in organization processes. Delivers the highest-quality products and services which meet the needs and requirements of internal and external customers. Is committed to continuous improvement through empowerment and management by data. Leverages technology to positively impact quality. Is willing to re-engineer processes from scratch. Is open to suggestions and experimentation. Creates a learning environment leading to the most efficient and effective work processes.

Stericycle currently offers its employees the option to participate in a full range of benefits, including a health care program which includes medical, dental, vision and prescription coverage, healthcare and dependent care flexible spending accounts, life and accidental death and dismemberment insurance, an employee assistance program, tuition reimbursement, paid vacation and sick time, a 401(k) plan, and an employee stock purchase plan. Participation in some programs requires that employees be regularly scheduled to work a minimum number of hours and/or to have fulfilled a waiting period after they begin employment with Stericycle.

The above description is meant to provide a summary of the nature and level of work being performed; it should not be construed as an exhaustive list of all responsibilities, duties and requirements of the job. This document does not create an employment contract, implied or otherwise. Stericycle will consider requests for workplace accommodations for protected physical or mental limitations in accordance with its human resources policies and local laws. To the extent permissible under local law, and consistent with business necessity, Stericycle reserves the right to modify the content formally or informally, either verbally or in writing, at any time with or without advance notice