IT Controls Analyst (Level II)

D.R. Horton - Arlington, TX

Full-time - Mid Level

Arlington, TX

Construction of Buildings

About the position

The IT Controls Analyst (Level II) at D.R. Horton will be a key member of the IT Security and IT Controls teams, reporting directly to the IT Cyber Security Risk Officer. This role focuses on developing and maintaining policies and procedures to ensure compliance with IT regulations, conducting risk assessments, and managing vendor assessments. The analyst will also be involved in disaster recovery and business continuity planning, as well as SOX and PCI audit activities.

Responsibilities

• Perform analysis of internal business and external events to assess organizational risk and compliance needs.
• Assist with the development and implementation of security policies, standards, and education efforts.
• Maintain existing policies and procedures to ensure compliance with regulations.
• Draft, implement, and track management action plans.
• Collaborate with Corporate Information Security and IT Controls teams to review security policies and procedures.
• Create, plan, maintain, and test Business Continuity and Disaster Recovery Plans.
• Create and maintain Vendor Risk Assessment templates and evaluations.
• Work with stakeholders to maintain or develop documentation based on audit findings.
• Research privacy-related topics to enhance departmental efforts.
• Provide input to the information security awareness and training program.
• Drive timely completion of compliance projects to meet business needs.
• Review official compliance documentation maintained by the department.
• Report weekly status to the IT Cyber Security Risk Officer and escalate issues as necessary.
• Coordinate with internal and external audits as needed.
• Maintain knowledge of industry compliance regulations and amendments.
• Develop and maintain positive relationships with IT staff and customers.
• Monitor activities to ensure compliance with internal policies and external regulations.
• Manage day-to-day compliance risk and recommend improvements.
• Conduct risk management reviews.

Requirements

• Bachelor's degree from a four-year college or university.
• Five plus years of information technology compliance experience.
• Experience with SOX and Operational Control testing.
• Understanding of NIST and COBIT frameworks.
• Ability to update policies and procedures based on current operations.
• Proficiency with MS Office and email.
• Ability to sit for the majority of an 8-hour workday and perform physical tasks as required.

Nice-to-haves

• CPA or CIA certification is a plus.
• CISSP, CISM, or CISA certification recommended.
• Experience in the mortgage industry or financial regulatory knowledge is a plus.
• Five years' experience in IT Compliance in a finance/lending related industry preferred.
• Experience with information technology in application development or infrastructure support preferred.

Benefits

• Employee stock purchase plan
• Health insurance
• Dental insurance
• 401(k)
• Vision insurance
• Life insurance