Senior IT Controls and Compliance Analyst

Company: The First American Corporation
Location: Orange
Posted on: November 21, 2020

Job Description:

Company Summary Join our team As a global leader in providing title insurance, settlement services and risk solutions for real estate transactions, First American (NYSE FAF) is an ideal place to build your career. We have been entrusted with helping our customers achieve and protect their dream of homeownership since 1889. We believe that our people are the key to the company's continued success, and we invest in diverse talents and backgrounds and empower our teams to achieve more than they could anywhere else. First American has created an award-winning culture and has been named to the Fortune 100 Best Companies to Work For list for the fifth consecutive year and to more than 50 regional Best Places to Work lists. For more information, please visit www.careers.firstam.com Job Summary Senior IT Controls and Compliance Analyst Job Summary Responsible for completing deliverables which support Audit workstreams for Lenders, Regulators, Cyber, SOX and SOC efforts. Provide support to management for SOXSOC readiness assessments. Works with personnel across all levels of the organization. In-depth knowledge of IT general controls, IT audit fundamentals and process analysis are required. Essential Functions Assist in the creation of an IT risk assessment, and develop self-assessment programs to evaluate areas of risk or concern based on regulatory, customer, internal and best practice requirements across the enterprise Perform analysis of audit control gaps over processes and tools, analyze evidence, and provide recommendations to remediate findings and improve the control environment Advise management on the design and implementation of control activities that reduce risk, add value, and mature the control environment Assist in the development, maintenance and implementation of ITCC tools and processes to streamline and automate compliance and control activities Support the enterprise Information Security and IT compliance awareness, communication, and education programs Provide excellent customer service in support of program activities Develop and maintain an ongoing relationship with control owners and key stakeholders including Information Security, IT, business lines, Internal Audit, and external third parties Assist with the maintenance and update of ITCC program documents Maintain an understanding of Company and IT objectives and risks Assist with other Information Security and ITCC initiatives as needed Perform ongoing education and training in Information Security related areas Provide subject matter expertise related to IT General Controls and Information Security policies and standards Maintain data within system of record which tracks issues, engagements and metrics that gets communicated throughout the organization Required to perform duties outside of normal work hours based on business needs. Job Complexities Tasks range in complexity from simple (perform an audit step) to fairly complex (perform a risk assessment and create an audit program to address risks) Tasks can require originality and ingenuity to evaluate risks and determine appropriate and cost-effective controls to mitigate risk Latitude is given for independent action Participates in brain-storming discussions and can act in an advisory capacity Impact of a single error is typically low, but multiple errors can have a significant impact if management cannot rely on the information being provided Maintain relationships with employees across the enterprise Supervision Received or Extended Works under general supervision Follows work procedures and guidelines Expected to work autonomously and escalate to management as needed. Does not supervise, provide direction or coordinate team activities Experienced personnel can act in a lead capacity to mentor junior personnel Typical Education Bachelor's Degree or above Typical Range of Experience Minimum 5 years relevant work experience in Information Security, IT Risk Management, IT Governance or IT Audit Effectively communicate IT compliance expectations to all levels of the organization including operational personnel executive management Gain support and consensus with multiple stakeholders and partners (internal and external) Manage multiple initiatives simultaneously, with strong ability to prioritize Respond appropriately to potential audit findings including vetting and assessment of risk Customer focused in the context of balancing risk reduction with business needs High attention to detail to manage, analyze and finalize artifacts and documents Highly developed oral and written communication skills strong presentation skills Highly flexible, adapting to changes in priorities and requirements Development and maintenance program-related documentation (e.g., standard operating procedures) Ability to quickly learn, communicate and apply technical concepts License or Certification Relevant, industry recognized security certification such as CISSP, CISA, CISM dice First American invests in its employees' development and well-being, empowers them to provide superior customer service and encourages them to serve the communities where they live and work. First American is committed to diversity and inclusion. We are an equal opportunity employer. For more information about our Company and our dedication to putting People First, check out firstam.comcareers.

Keywords: The First American Corporation, Orange , Senior IT Controls and Compliance Analyst, Other , Orange, California