The Senior IT Risk, Security, and Compliance Analyst is an individual contributor responsible for supporting the security, compliance, and risk posture of business applications within the R&D IR portfolio. The role partners cross-functionally with risk, security, compliance, and business and IT stakeholders to facilitate initiatives that reduce risk, strengthen control effectiveness, and enable successful delivery of related projects. Key outputs include maintaining accurate program data, monitoring performance against objectives, supporting risk reduction activities, and contributing to the identification, development, and implementation of system enhancements that improve security, compliance, and operational effectiveness across the portfolio.
Responsibilities:
- Ensure compliance with applicable corporate, organizational, and regulatory policies and procedures.
- Build and maintain relationships across BTS and business functions.
- Work with compliance leads to facilitate accurate interpretation of system compliance requirements within assigned project areas and supports teams in executing required compliance activities in accordance with applicable policies and procedures.
- Support the security, risk, and compliance posture of business applications within the R&D IR portfolio by coordinating activities that align with enterprise standards, regulatory expectations, and internal control requirements.
- Partner with business, IT, security, risk, compliance, and application stakeholders to communicate project needs, clarify requirements, and support delivery of risk reduction and compliance-related initiatives.
- Support execution of control, compliance, and risk management processes, including evidence collection, control monitoring, access or recertification support, and remediation tracking as applicable.
- Understand and clearly communicate defined objectives, milestones, remediation plans, risks, issues, gaps, or delays and communicate status to appropriate stakeholders.
- Contribute to the preparation of clear status updates, metrics, dashboards, and reports that communicate progress, risks, decisions, and outcomes to management and stakeholders.
- Promote a culture of compliance, accountability, and continuous improvement by applying sound judgment, attention to detail, and effective collaboration across the organization.