Sr IT Governance Administrator

Sr IT Governance Administrator at Premier summary :

The Sr IT Governance Administrator manages the Lockpath GRC platform, developing workflows and automation to support IT governance, risk, and compliance initiatives. This role involves coordinating IT audits, risk assessments, control testing, and vendor reviews to ensure adherence to industry standards such as PCI, ISO27001, and COBIT5. The position collaborates with senior leadership and enterprise risk management to maintain effective IT policies, controls, and continuous improvement activities within the organization.

Location : Sioux Falls, SD Shift : 8 : 00am-5 : 00pm, Monday-Friday Job Status : Full-Time Company : PREMIER Bankcard

About the Role

This roles primary responsibility is to administer the lockpath GRC platform including development of tables, workflows, and formulas using minimal C-sharp coding. Administration will include working with the vendor to build integration and automation for the platform.IT GRC will be responsible for the management IT Governance, Risk and Compliance services to the organization. This includes ensuring that proper IT policies, standards, and controls are in place to manage risk and compliance obligations, aligning to industry standards. IT GRC will facilitate training and awareness of IT policies, standards, processes, and procedures. IT GRC will test the effectiveness of IT controls and manage continual improvement activities for IT controls. IT GRC will partner with senior leadership for the review of IT risks and controls and provide metrics on key IT risks and overall compliance status. In partnership with ERM, IT GRC will ensure PREMIER risk management processes are applied to IT assets and controls, including vendor assessments. IT GRC will manage IT audits, evidence collection, management responses, and corrective action planning.

Job Duties and Responsibilities

• Assist with performance of organizational risk assessment activities
• Conduct IT assessments and testing of defined controls
• Analysis and reporting of IT standard conformance and evaluation of noted exceptions
• Assist in the management of IT audits including information requests, management responses, corrective actions, and the closure of findings.
• Assist in the development of IT risk management specifications, processes and reports
• Assist in the development and management of IT metrics reporting
• Analyze IT standards and processes for efficiency and effectiveness
• Assist in the planning and development of IT controls including consultation on technical solutions or process enhancements.
• Assist in PCI compliance management
• Coordinate the performance of organizational risk assessment activities
• Coordinate Information Technology audit and testing activities of defined controls
• Oversee the analysis and reporting of IT standard conformance and analyze noted exceptions
• Manage IT vendor assessments and reviews
• Coordinate the management of IT audits including information requests, management responses, corrective actions and the closure of findings.
• Update job knowledge by tracking and understanding emerging GRC practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations
• Assist in the administration of a IT GRC platform
• Assist in the creation and implementation of risk treatment plans
• Assist in the completion of gap analysis activities against industry standards
• Create and maintain proper system and process documentation
• Develop and report on overall IT metrics and control effectiveness
• Assist in the evaluation of new systems and programs
• Assist in identifying improvements to existing systems to enhance IT controls.
• Assist in PCI compliance management

Skills and Qualifications Two to three years previous work experience of auditing, administering, design and planning of the control frameworks in an enterprise networked environment. Bachelor degree, or equivalent degree or experience preferred. Strong expertise with control frameworks PCI, ISO27001, CobIT5, FFIEC. Advanced Training Courses and / or Advanced certification such as PCI-P, PCI-ISA, ISACA.

Competitive Benefits Package

Our Culture

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights notice from the Department of Labor.

Keywords :

IT governance, risk management, compliance, GRC platform, IT audits, PCI compliance, ISO27001, COBIT5, control frameworks, vendor assessments