Washington Federal - Seattle, WA
posted 4 months ago
We are seeking an experienced IT Risk and Compliance Analyst to join our team at WaFd Bank. In this role, you will support the organization's IT risk management and compliance programs. This includes identifying, assessing, and mitigating risks to the IT environment and ensuring compliance with relevant regulations, standards, and policies. The role also involves collaborating with various stakeholders to implement and maintain a robust IT governance framework. Along with the key functions listed below, this position will be expected to uphold the value WaFd Bank places on simply being nice when servicing our colleagues and clients. As an IT Risk and Compliance Analyst, you will develop, support, and maintain an IT risk management framework, including policies, procedures, and control mechanisms, to identify, assess, mitigate, and monitor IT risks across the organization. You will conduct regular risk assessments, gap analyses, and control testing to evaluate the effectiveness of IT controls and identify potential threats to the IT environment and areas for improvement. Collaboration with IT, business units, and other stakeholders will be essential to implement risk mitigation strategies and remediation plans for identified control deficiencies. You will also provide support with third-party risk management activities and administration, including compliance documentation collection, contract reviews, contract negotiation, and technology cost analysis. In terms of compliance, you will ensure IT processes adhere to and maintain compliance with relevant laws, regulations, and industry standards such as FFIEC, GLBA, SOX, and data privacy regulations like CCPA. Staying current with changes in relevant laws, regulations, and industry best practices will be crucial to ensure the organization remains compliant. You will perform regular compliance reviews and assessments, coordinate with internal and external auditors, and develop and maintain IT compliance documentation, including policies, procedures, and guidelines. Additionally, you will assist in the development and maintenance of the IT governance framework, monitor adherence to IT governance policies and procedures, and report non-compliance. You will also develop and deliver training programs to educate employees on IT risk management and compliance practices. In the area of incident management, you will assist in the investigation and review of IT incidents and problems, coordinate with stakeholders to implement corrective actions and preventive measures, and conduct Post Incident Reviews. Your responsibilities will also include evaluating and enhancing internal controls over IT systems and processes, preparing and presenting risk and compliance reports to senior management, and maintaining detailed records of risk assessments, compliance audits, and incident investigations. This role is critical in ensuring that IT controls are effectively designed and operating as intended, thereby supporting the overall risk management and compliance objectives of WaFd Bank.