IT Controls Analyst (Level II)

D.R. Horton - Arlington, TX

Full-time - Mid Level

Arlington, TX

251-500 employees

Construction of Buildings

About the position

The IT Controls Analyst (Level II) at D.R. Horton will be a key member of the IT Security and IT Controls teams, reporting directly to the IT Cyber Security Risk Officer. This role focuses on developing and maintaining policies and procedures to ensure compliance with IT regulations, including SOX and PCI. The analyst will conduct risk assessments, manage vendor evaluations, and support disaster recovery and business continuity planning efforts.

Responsibilities

• Perform analysis of internal business and external events to assess organizational risk and compliance needs.
• Assist in the development and implementation of security policies, standards, and education efforts.
• Maintain existing policies and procedures to ensure compliance with regulations.
• Draft, implement, and track management action plans.
• Collaborate with Corporate Information Security and IT Controls teams to review security policies and guidelines.
• Create and maintain Business Continuity and Disaster Recovery Plans, including testing and maintenance.
• Develop Vendor Risk Assessment templates and evaluations.
• Work with stakeholders to maintain or develop documentation based on audit findings.
• Research privacy-related topics to enhance departmental efforts.
• Provide input to the information security awareness and training program.
• Drive timely completion of compliance projects to meet business needs.
• Review official compliance documentation maintained by the department.
• Report weekly status to the IT Cyber Security Risk Officer and escalate issues as necessary.
• Coordinate with internal and external audits as needed.
• Maintain knowledge of industry compliance regulations and amendments.
• Develop and maintain positive relationships with IT staff and customers.
• Monitor activities to ensure compliance with internal policies and external regulations.
• Manage day-to-day compliance risk and recommend improvements.
• Conduct risk management reviews.

Requirements

• Bachelor's degree from a four-year college or university.
• Five plus years of information technology compliance experience.
• Experience with SOX and Operational Control testing.
• Understanding of NIST and COBIT frameworks.
• Ability to update policies and procedures based on current operations.
• Proficiency with MS Office and email.
• Ability to sit for the majority of an 8-hour workday and perform physical tasks as required.

Nice-to-haves

• CPA or CIA certification is a plus.
• CISSP, CISM, or CISA certification recommended.
• Knowledge of the mortgage industry or financial regulations is a plus.
• Five years' experience in IT Compliance in a finance/lending related industry preferred.
• Experience with information technology in application development or infrastructure support preferred.

Benefits

• 401(k)
• Dental insurance
• Employee stock purchase plan
• Health insurance
• Life insurance
• Vision insurance