Systems Risk & Controls Analyst

Sun Communities - Southfield, MI

Full-time - Mid Level

Southfield, MI

Real Estate

About the position

The Systems Risk & Controls Analyst at Sun Communities, Inc. is responsible for planning and coordinating activities within the Enterprise Systems Management Team to ensure that control activities are performed timely and as designed. This role involves ensuring that all system control policies and procedures are well-documented, conducting internal reviews for compliance, and preparing for audit testing activities.

Responsibilities

• Oversee compliance with IT general controls and audit requirements for enterprise systems.
• Assist with the design, implementation, and execution of enterprise system controls.
• Collaborate with Enterprise System Managers to ensure smooth operation of implemented systems and effective risk mitigation.
• Prepare for annual audit testing activities and liaise with stakeholders to organize documentation for audit requests.
• Prepare and present audit reports to senior management, highlighting key findings and recommendations.
• Identify and assess system risks, proposing appropriate mitigation strategies.
• Assist with preparation and tracking of management's response to audit findings and remediation efforts.
• Collaborate with leadership on compliance-related opportunities and findings, presenting suggestions and proposals.
• Establish and sustain governance tools and processes within the Enterprise Systems Team for effective control management.
• Collaborate with system managers to build programs focused on continuous improvement in risk and controls.

Requirements

• Bachelor's Degree in Information Systems, Computer Science, Accounting or related field.
• 5 years of experience in Systems Administration, IT Audit, and/or system support roles.
• 3 years of experience in IT audits in public companies.
• Certification in one or more auditing frameworks (CISA or equivalent).
• Certified Internal Auditor (CIA).
• Certified Information Systems Security Professional (CISSP).
• Proficient understanding of IT frameworks and standards like COBIT, ISO 27001, NIST, and ITIL.
• Experience in auditing various business systems, including ERP systems (e.g., NetSuite, SAP, Oracle).
• Knowledge of relevant regulations (e.g., SOX, GDPR, CIPA) and industry standards for cybersecurity and data protection.
• Ability to think creatively and identify long-term solutions to complex matters.
• Demonstrated aptitude for learning new software systems, technologies, and methodologies quickly.
• Flexibility to respond to business needs during non-business hours.

Benefits

• Paid jury duty
• Paid parental leave
• AD&D insurance
• Paid holidays
• Disability insurance
• Dependent care reimbursement
• Health insurance
• On-site gym
• Dental insurance
• Flexible spending account
• Tuition reimbursement
• Paid time off
• Employee assistance program
• Vision insurance
• 401(k) matching
• Opportunities for advancement
• Prescription drug insurance
• Pet insurance