Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from AAA
It's a great time to join AAA The Auto Club Group!
JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD
Job Type:
Full time
Exempt/Non Exempt:
Salary
Job Description:
IT Risk Analyst - The Auto Club Group
What you will do:
The IT Risk Analyst assists with the execution and maintenance of the IT risk management program, including the evaluation and mitigation of information technology risks across the organization and supporting leading risk teammates as needed.
Primary Duties and Responsibilities:
- Contribute to documentation of IT risk management policies, standards, and processes
- Help maintain alignment with company objectives and regulatory requirements
- Perform analysis of key IT Risk performance/risk indicators for management
- Support internal and external IT risk assessments as dictated by the senior team members
- Contribute to IT risk appetites, tolerances, and mitigation plans related to IT systems as dictated by the senior team members
- Support monitoring activities of 1st line access reviews for general users, privileged users, and passwords
- Coordinate with IT to maintain an IT risk register, control library, and assign risk ownership
- Support regulatory readiness efforts and governance assessments for the information technology controls environment
- Research industry trends, emerging threats, and evolving regulations
- Contribute to training company stakeholders on IT risk
- Contribute to Enterprise Risk Management team's reporting and processes (e.g. key risks, watch list risks, AI Systems Program)
Supervisory Responsibilities:
None
How you will benefit:
IT Risk Analyst will earn a competitive salary of $65,000 - $80,000 annually with annual bonus potential based on performance.
Excellent and comprehensive benefits packages are just another reason to work for the Auto Club Group. Benefits include: • 401k Match
- Medical
- Dental
- Vision
- PTO
- Paid Holidays
- Tuition Reimbursement
We're looking for candidates who:
Required Qualifications:
Education: • Bachelor's degree in information technology, cybersecurity, risk management, computer science, or related area
Experience: • 2-4 years of experience in IT risk management, IT audit, cybersecurity, or related roles
Knowledge of: • Familiarity with property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
- Foundational knowledge of Internal controls and core IT technologies and processes (e.g. network systems, operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
- Familiarity with risk assessment methodologies and GRC tools
Skills: • Good written and verbal communication skills
- Attention to detail with the ability to follow processes and standards
- Proficiency in Microsoft Office products
- Work collaboratively and manage competing priorities, especially when translating expectations between third line or external audit assurance groups and first line risk and controls owners within IT
- Ensure strong relationship management and value demonstration to a wide set of stakeholders
- Identify, assess, and prioritize IT risks
- Multitask and work closely and effectively with other employees
- High degree of attention to detail and organization
- Maintain a high volume of work with few mistakes or delays
Preferred Qualifications:
Education: • Master's degree in Information Technology, Cybersecurity, Risk Management, Computer Science, or related area; MBA also considered
- One or more of the following professional certifications such as CISA, CISM, CRISC, or CISSP are strongly preferred
Prior Experience with: • IT risk frameworks (e.g. NIST CSF, COBIT) in the insurance or financial services industry
- IT systems and technologies including ServiceNow, Saviynt, Workday, SAP, Salesforce, Guidewire
- IT risk management for emerging technologies such as AI, machine learning, cloud computing, process automation, data analytics, etc.
Work Environment
This is a hybrid work arrangement (time spent in office and remote). Depending on the employee's role and leadership's assessment, some employees will come in to an ACG facility on a weekly basis, a monthly basis, or on an "as needed" basis for key meetings and collaborative activities. Most employees will be required to come into the office, at a minimum, for important departmental meetings or team building events.
Who We Are
Become a part of something bigger.
The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.
By continui
Source: AAA careers