IT Controls Analyst (Level II)

D.R. Horton - Arlington, TX

Full-time - Mid Level

Arlington, TX

251-500 employees

Construction of Buildings

About the position

The IT Controls Analyst (Level II) at D.R. Horton, Inc. plays a crucial role in the IT Security and IT Controls teams, reporting directly to the IT Cyber Security Risk Officer. This position is responsible for developing and maintaining policies and procedures to ensure compliance with IT regulations, conducting risk assessments, and managing vendor assessments. The analyst will also be involved in disaster recovery and business continuity planning, as well as SOX and PCI audit activities.

Responsibilities

• Perform analysis of internal business and external events to assess organizational risk and ensure IT compliance needs are met.
• Assist in the development and implementation of security policies, standards, and education efforts.
• Maintain existing policies and procedures to address compliance needs.
• Draft, implement, and track management action plans.
• Collaborate with Corporate Information Security and IT Controls teams to review security policies and procedures.
• Create, plan, maintain, and test Business Continuity and Disaster Recovery Plans.
• Create and maintain Vendor Risk Assessment templates and evaluations.
• Work with stakeholders on documentation maintenance or development due to audit or compliance findings.
• Research privacy-related topics to enhance departmental privacy efforts.
• Provide input to the information security awareness, training, and education program.
• Drive timely completion of Business Continuity, Disaster Recovery, Vendor Management, and Information Security projects.
• Review all official Compliance documentation maintained by the department.
• Report weekly status to the IT Cyber Security Risk Officer and escalate issues as needed.
• Coordinate work with internal and external audits as required.
• Maintain knowledge of industry compliance regulations and amendments.
• Develop and maintain positive relationships with IT staff and customers.
• Monitor activities to ensure compliance with internal policies and external regulations.
• Manage day-to-day compliance risk and recommend improvements.
• Conduct risk management reviews.
• Conduct business in a professional and ethical manner.

Requirements

• Bachelor's degree from a four-year college or university.
• Five plus years of information technology compliance experience.
• SOX and Operational Control testing experience.
• Understanding of NIST and COBIT frameworks.
• Ability to update policies/procedures based on current operations.
• Proficiency with MS Office and email.
• Ability to sit for the majority of an 8-hour workday; use hands and fingers; reach with hands and arms; talk and hear; specific vision abilities required include close vision and peripheral vision.

Nice-to-haves

• CPA or CIA certification is a plus.
• CISSP, CISM, or CISA certification recommended.
• Other applicable certifications are a plus.
• Mortgage Industry/Financial Regulatory knowledge is a plus.
• Five years' experience in the IT Compliance field in a finance/lending related industry preferred.
• Experience with information technology in application development or infrastructure support preferred.

Benefits

• Medical, Vision and Dental insurance
• 401(K) retirement plan
• Employee Stock Purchase Plan
• Flexible Spending Accounts
• Life Insurance
• Vacation, Sick, Personal Time, and Company Holidays