Job Description
POSITION GOAL:
The IT Governance Risk and Compliance Analyst supports the implementation and oversight of IT governance practices within a manufacturing environment, ensuring alignment with NIST standards and ICFR requirements. This role is responsible for maintain governance documentation, coordinating audit activities, and supporting compliance efforts across IT systems and processes. The ideal candidate will have strong organizational skills, a solid understanding of IT controls, and experience working with auditors and GRC tools.
ESSENTIAL FUNCTIONS:
- Maintain and enhance IT governance frameworks based and NIST and ICFR principles.
- Develop, review, and update IT policies, procedure, and control documentation.
- Ensure IT practices support financial reporting integrity and regulatory compliance.
- Serve as the primary liaison for internal and external IT audits.
- Coordinate evidence collection, walkthroughs, and remediation activities.
- Track audit findings and ensure timely resolution and documentation.
- Assist in identifying and assessing IT risks related to financial reporting or cybersecurity.
- Support risk mitigation planning and control implementation.
- Monitor regulatory changes and assess their impact on IT governance.
- Track and report on IT governance metrics and control effectiveness.
- Support continuous improvement initiatives across IT compliance processes.
- Facilitate training and awareness programs related to IT controls and audit readiness.
Requirements
- Completion of 1 to 4 years of post-secondary education in a relevant field such as Information Technology, Cybersecurity, or Business Administration.
- Foundational knowledge of IT Governance, audit coordination, NIST (National Institute of Standards and Technology) frameworks, Internal Controls over Financial Reporting (ICFR), and Governance, Risk & Compliance (GRC) tools.
- Strong communication, organizational, and analytical skills.
- Proficiency in Microsoft Office applications is required, and experience with Power BI is considered an asset.