Role:
At a senior level of proficiency, this position will provide compliance and risk management support to all levels of management. Identify and implement process and control changes, along with adoption of industry best practice risk mitigation techniques. Exhibit strong technical and team leadership skills in working with IT and business partners to (1) develop, implement and maintain the IT general and application computer controls in alignment with the COBIT framework for the governance and management of IT; (2) develop and implement IT risk framework, methodologies, controls, and processes for identifying, evaluating, monitoring and reporting IT risks; (3) collaborate with internal/external auditors and examiners on the state of IT controls; and (4) oversee the review and assessment of vendor control environments and formulate a vendor risk rating.

Responsibilities:

• Work with internal auditors, external auditors, and Federal Housing Finance Agency examiners to identify, document, and communicate evidence of our control environment.
• Ensure that deviations from established policies or controls are thoroughly reviewed, documented, and appropriately reported. Identify gaps and assist in the design and implementation of remediating controls.
• Analyze, design, develop, document, implement, and support IT internal controls to ensure reliability and transparency of general IT and application controls, effectiveness and efficiency of operations, and compliance with applicable rules, regulations, guidelines, policies, and procedures.
• Analyze and document vendors control environment and independent assessments to assess the effectiveness or control gaps to formulate risk rating.
• Oversee the development, ongoing management, and monitoring of the COBIT Process and Practice library ensuring that the documents are reviewed, and updated on regular frequency in alignment with the COBIT framework for the governance and management of IT.
• Monitor control activities and report on the effectiveness of the control or opportunities to enhance the process.
• Participate in the development, analysis, and review of IT reporting to communicate department performance against key indicators, performance on prioritized initiatives, and results of incident investigations.
• Collaborate and support team members with other strategic project initiatives.                                                     

1. Advanced knowledge of IT controls and experience communicating with internal auditors, external auditors, and Federal Housing Finance Agency examination staff on the state of IT controls.
2. Attention to detail and accuracy are critical for this position.
3. Independently gather documentation of IT key processes and explain these to auditors or examiners. Work with auditors or examiners to verify findings, define corrective actions for findings, assist with implementation as needed, and track resolutions.
4. Independently or with minimal supervision, work closely with developers, systems, security and users to research complex controls across multiple platforms, software packages and programming languages.
5. Advanced knowledge of COBIT framework and ability to develop and implement best practices to processes.
6. Demonstrate an advanced level of understanding and ability to document key enterprise risks and controls, including the ability to discern strengths and weaknesses.
7. Maintain awareness of changes in the areas of IT governance and controls, risk management, SOX compliance and records management.
8. Knowledge of records management concepts and best practices and apply relevant practices.
9. Willingness to adapt to changing business and technical environments.
10. Provide regular reporting on projects and tasks to assist management.
11. Balance multiple tasks, priorities, and deadlines.
12. Protect business records created or used in business processes to ensure availability, confidentiality, integrity; and the retention and destruction of such as specified by relevant policies.
13. Ability to handle multiple tasks simultaneously, ability to problem solve, memory for details, ability to prioritize, and ability to maintain concentrated mental and visual attention for sustained periods.

1. Three to five years of general audit/risk identification/control skills and the ability to work effectively to achieve deadlines.
2. Good communication skills, both oral and written, and the ability to work effectively under stress and deadlines.
3. Ability to independently identify IT control issues, define options and recommend solutions. Assist in implementation as needed.
4. Strong knowledge of IT internal controls required.
5. Strong knowledge of COBIT framework.
6. Ability to collaborate with business partners, bank management and auditors or examiners to achieve departmental and corporate goals.
7. Ability to set priorities, consistently meet deadlines and simultaneously manage multiple projects.
8. Inquiring mindset with the ability to think logically.
9. Strong knowledge of experience using Microsoft products.
10. Ability to protect and classify business records created or used in business processes to ensure availability, confidentiality, integrity; and the retention and destruction of such as specified by relevant policies.
11. Ability to work independently, knowledge of office automation software and use general office equipment.
12. Experience with Agile development methods.
13. Strong experience with network and application security concepts, database administration, and user access security standards

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, and MOUNTAIN, LTD., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.