Job Description :
Position: Security Consultant – SOX/Compliance/IT Audits
Duration: Long Term Contract
Location: Lincolnshire, IL
Job Description:
Responsibilities
· Execute effective security risk assessments and coordinate with Foundation Technology, Workspace Technology and Global Security Services team in delivering ITPS mandates
· Maintain regional and local stakeholder relationships, meeting schedules, minutes, RACI and partnering accountability
· Contribute toward continuous improvement in methodologies and practices of ITGC to attain higher capability maturity levels
· Provide support for Evidence Repository (i.e. bWise, Archer, Connect)
· Appropriately challenge and require high quality findings and issue definition from regional and local control owner /assurance partners
· Provide support of policy/standards exceptions, report status to regional and local management, and advise on corrective actions
· In conjunction with the Assessment Manager, provide advisory services and activities including risk assessments, definitions of policy and standard documentation, and interpretation of compliance results
· Maintain, manage and monitor regional and local compliance to the internal control frameworks such as the IT Risk Standards, the Consolidated IT Control Catalog, Internal Controls Framework, SOX, HIPAA, PCI, SOC1-2, HiTRUST regulatory / legal and other obligations / requirements
OTHER SKILLS:
· Knowledge of information risk concepts and practices required
· Knowledge of controls manifestation in large global corporations with regional and local presence is required
· Experience of working across business units and geographical boundaries to engage IT, business and team members is required
· Ability to investigate, question and interpret internal and external security environments is required
· Knowledge of Frameworks, including SOX, HIPAA, PCI, SOC1, SOC2, HiTRUST is a plus
· Detailed knowledge of ITGC, Auditing principles / practices is desired
· Good understanding of Vendor management desired
· CISSP, CISM, CISA, ITIL and/or COBIT
· PMP Certification - Prince2 or PMI (preferred)
· Agile (preferred)
· SCRUM (preferred)
· Flexibility to work on weekends and holidays
· Multi-lingual (preferred)