IT Compliance Specialist Sr, GRC

Memphis, TN, United States

Taking care of people is at the heart of everything we do, and we start by taking care of you, our valued colleague. A career at Sedgwick means experiencing our culture of caring. It means having flexibility and time for all the things that are important to you. It's an opportunity to do something meaningful, each and every day. It's having support for your mental, physical, financial and professional needs. It means sharpening your skills and growing your career. And it means working in an environment that celebrates diversity and is fair and inclusive.

A career at Sedgwick is where passion meets purpose to make a positive impact on the world through the people and organizations we serve. If you are someone who is driven to make a difference, who enjoys a challenge and above all, if you're someone who cares, there's a place for you here. Join us and contribute to Sedgwick being a great place to work.

Great Place to Work

Most Loved Workplace

Forbes Best-in-State Employer

IT Compliance Specialist Sr, GRC

PRIMARY PURPOSE: To advance the IT Compliance program including coordinating and reporting of the work; to represent Sedgwick IT with specialized knowledge of IT Compliance activities and standards to clients, carriers and external stakeholders.

ESSENTIAL FUNCTIONS and RESPONSIBILITIES

Responds to client and carrier IT risk assessments and audit requests in a timely manner.

Assists in measuring the ongoing compliance within the IT organization to the IT General Controls and relevant frameworks such as PCI-DSS or ISO 27001.

Collaborates with solution control owners to assess compliance against the controls.

Identifies gaps/actions in cases of non-compliance and works with senior members of the team to collaborate with solution owners to design and implement the appropriate controls.

Tracks compliance action items, verifies evidence, and ensures all actions are closed on a timely basis and in compliance with the control with routine oversight.

Tracks monitoring activities to ensure all activities are closed on a timely basis; ensures non-compliance items have action items created and are tracked to completion with routine oversight.

Performs project management duties in the planning, scheduling, coordinating, reviewing and reporting of IT compliance activities.

ADDITIONAL FUNCTIONS and RESPONSIBILITIES Performs other duties as assigned.

Supports the organization's quality program(s).

Travels as required.

QUALIFICATIONS

Education & Licensing Bachelor's degree in computer science, Information Systems, or related field, or equivalent work experience.

At least one of the following credentials preferred: Certified Internal Auditor (CIA), Certified Information System Security Professional (SSCP), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Auditor (CISA) designation.

Experience 2+ years of experience in IT compliance, risk, or audit functions assessing findings and implementing remediation actions or equivalent combination of education and experience required to include two (2) years project management and/or experience in a team environment.

Experience with scripting languages such as JavaScript, HTML, CSS, and XML preferred.

Skills & Knowledge Knowledge of basic IT system architecture concepts and processes

Knowledge of ServiceNow system architecture concepts and processes

Creative and analytical approach to problem solving

Excellent oral and written communication skills, including presentation skills

PC literate, including Microsoft Office products

Analytical and interpretive skills

Strong organizational skills

Excellent interpersonal skills

Ability to create and complete comprehensive, accurate and constructive written reports

Ability to work in a team environment

Ability to meet or exceed Performance Competencies

WORK ENVIRONMENT

When applicable and appropriate, consideration will be given to reasonable accommodations.

The work requires a clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines.

The work does also involve video conference calls and occasional in-person meetings as needed. Candidates who live within a 40-mile radius of an office location may be required to work between one and three days per week in the office, depending on the agreement with their manager. This position must comply with the company's policies and procedures, as well as the applicable laws and regulations governing employment.

When applicable and appropriate, consideration will be given to reasonable accommodation. The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.

Sedgwick is an Equal Opportunity Employer and a Drug-Free Workplace.

If you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, consider applying for it anyway! Sedgwick is building a diverse, equitable, and inclusive workplace and recognizes that each person possesses a unique combination of skills, knowledge, and experience. You may be just the right candidate for this or other roles.

#J-18808-Ljbffr