IT COMPLIANCE ANALYST - Hybrid

Job Overview

The ideal candidate for the IT Compliance Analyst role will have a strong desire to be part of a growing information security team in a high-volume, dynamic environment with sufficient experience to hit the ground running on IT compliance initiatives. This individual will focus on executing and coordinating IT security compliance processes related to a broad range of government and industry regulations and requirements. The IT Compliance Analyst will perform tasks such as provisioning access, onboarding users, maintaining documentation, writing manuals, training new users, and troubleshooting end user issues. They will also ensure compliance within the IT environment by keeping approval workflows current, correctly provisioning access, and preventing system bypasses. Additionally, the analyst will create metrics and dashboards on IT environment usage and compliance objectives, propose continuous improvement ideas, and work with business and technical groups to meet growing compliance needs. They will also support audits and certifications by creating and maintaining documentation regarding TE’s security and operational controls.
 

RESPONSIBILITIES

 
· Perform IT analyst tasks in support of maintaining and administering a critical IT environment comprising file servers, applications and virtual desktops.
· Perform administrative tasks within the IT environment such as provisioning access, onboarding users, maintaining documentation, writing manuals, training new users and troubleshooting issues of end users.
· Maintaining compliance requirements within IT environment such as ensuring approval workflow is current and updated, access to environment is provisioned correctly, users are not bypassing the systems, etc.. 
· Create metrics and dashboards on IT environment usage and compliance objectives to leaders and propose continuous improvement ideas 
· Onboard new plants into the IT environment by facilitating mass onboarding, and data migration in a compliant and seamless way.
· Work along with Champions in business units to promote the IT environment and improve usability through collaboration with end users.
· Identify non-compliance and resolve open concerns and business adoption issues.
· Work with business and technical groups to determine scope, implement controls, perform audits and improve control design to meet growing needs of various compliance requirements.
· Create and maintain documentation regarding TE’s security and operational controls to support compliance audits and certifications.
· Perform IT control testing and gap analysis in support of TE’s compliance programs, primarily DFARs 7012 & CMMC.
· Lead internal and external audits & advisory efforts related to CMMC compliance.
· Ensure data subject to regulations and advanced protection requirements are safeguarded during M&A & IT transformation activities.
· Work with Legal teams to ensure alignment regarding IT and Legal requirements to meet compliance obligations as well as serve as point person for maintaining IT compliance scores in regulatory systems-of-record, internal and external to TE.
· Identify gaps in the design and operating effectiveness of controls and identify opportunities for improvements that reduce risk and/or align TE with industry-recognized internal control frameworks.
· Complete security assurance questionnaires from internal and external stakeholders, including customers and cyber-insurers.

What your background should look like:

SKILLS & KNOWLEDGE

 
· General knowledge of information security and related technologies, including identity & access management; database, operating system, and network security; endpoint security; application security; data protection and leakage; vulnerability management; security logging and monitoring; etc

· Possess strong technical IT analyst skills, including proficiency in data analysis tools and software (Excel is a must), experience with IT project management methodologies, and good understanding of system integration and data migration activities/concepts.

· Possess ability to design and implement IT solutions that meet business needs, combined with knowledge of cloud computing services and platforms, and excellent troubleshooting and problem-solving skills, is critical for success in this role.

· Ability to track and manage numerous parallel activities.

· Ability to identify opportunities for continuous improvement and execute on them.

· Ability to work efficiently and independently with minimal supervision (i.e., self-motivated, and willing to stretch to meet important deadlines).

· Ability to work successfully in a cross-functional team environment.

· Bachelor’s degree (High School +4 years)  

· Years of experience: 2 - 5 years or more

· Familiarity with regulations relevant to IT security and compliance for a public, global manufacturing company (e.g., SOX; PCI; HIPAA: US and international privacy regulations; US and international cybersecurity regulations and export restrictions such as DFARS, ITAR and UKML) and/or Controls Frameworks (e.g., COSO, COBIT, NIST, ISF Standards of Good Practice, ISO 27001); and industry or regionally specific certifications (e.g., TISAX; CyberEssentials).

· Experience with any of the following is a plus: manufacturing and OT/ICS systems; IT audit; governance for IT outsourcing; risk management frameworks; and Kaizen/lean methodologies.

· Active security certification (CISSP, CISM, CRISC or CISA) or equivalent is a plus
 

COMPETENCIES:

- Integrity
- Accountability
- Teamwork
- Managing conflict
- Action Oriented
- Effective verbal and written communication
- Creative thinking

Competencies