Senior IT Governance Analyst

Cima+ - Minnetonka, MN

Full-time - Mid Level

Minnetonka, MN

About the position

The Senior IT Governance Analyst position is a critical role within the Information Technology and Cyber Security organizations, focusing on audit, compliance, and risk remediation. This position is hybrid, based in Minnetonka, MN, and is structured as a 3 6-month contract to hire. The successful candidate will report directly to the Governance Director and will be responsible for collaborating with various teams, including Internal Audit, Segment Risk, and Cyber Security, to ensure that tasks are completed on schedule and that all compliance requirements are met. In this role, the analyst will work closely with risk and audit teams, as well as subject matter experts, to drive the risk evaluation and remediation processes to completion. Building strong partnerships with key technology partners and other IT areas is essential for success. The analyst will evaluate findings within the pipeline to ensure proper planning of priorities and resources, facilitating communication across teams to meet project requirements and deliverables associated with identified findings. The Senior IT Governance Analyst will also assist with regulatory, audit, and compliance exams, ensuring that required information is provided in a timely manner. This includes supporting governance and operational departments with updates to policies, standards, and procedures. The analyst will be responsible for maintaining the accuracy and integrity of project plan deliverables, providing status tracking and updates to various levels of leadership, and scheduling and facilitating meetings. The role may also involve leading initiatives and projects, requiring excellent verbal and written communication skills to explain risks and IT-related concepts clearly and concisely.

Responsibilities

• Support the Information Technology and Cyber Security organizations in audit, compliance, and risk remediation.
• Collaborate with risk and audit teams and subject matter experts to drive risk evaluation and remediation processes to completion.
• Build strong partnerships with key technology partners, Risk, Cyber Security, and IT areas outside of the immediate team.
• Evaluate and understand findings within the pipeline to ensure proper planning of priorities and resources.
• Facilitate communication across teams to meet project requirements and deliverables associated with identified findings, milestones, and deliverables.
• Work with subject matter experts to create and maintain remediation strategies, tasks, and documentation related to action plan milestones and deliverables.
• Assist with regulatory, audit, and compliance exams, ensuring required information is provided in a timely manner.
• Support governance and operational departments with policy, standard, and procedure updates.
• Collect, maintain, ensure accuracy and integrity for tracking of project plan deliverables.
• Provide status tracking, updates, and reporting to various levels of leadership.
• Schedule and facilitate meetings.
• May lead initiatives and projects.

Requirements

• 1-3 years of IT GRC, information security, and/or audit experience.
• Proven ability to work with technology and business owners, information security, risk, compliance, and audit teams to ensure clear communications among all parties.
• Track record of successful project deliverables on time, within budget, and met objectives.
• Experience in using Archer or other related systems.
• Experience using Azure Dev Ops or similar agile toolsets.
• Experience with technical writing.
• Experience processing, analyzing, or working with several different types of data, including risk ratings, control, and metrics.
• Ability to collect, analyze, and disseminate information with attention to detail and accuracy.
• Knowledge of control testing and associated tests in relation to project plan implementation.

Nice-to-haves

• Certifications (CISM, CISA, CySA+, Security+ or CRISC).