IT GRC Specialist

Join Solar Turbines!

JOB PURPOSE:

To support the ongoing Security, Risk Management and Compliance programs within the Solar Turbines organization, protecting the computing resources and data of the organization. This position provides the opportunity to be a contributing member of the Governance, Risk and Compliance team collaborating with cutting edge technology, processes and highly skilled developers to deliver high quality experiences while delivering efficient risk management.

What will be your task at this position?

Key areas of accountability include collaborating with the GRC team in monitoring the compliance programs, interfacing with process and control owners to obtain support and assess and prepare documentation to ensure the risk management program/s are implemented appropriately.

Responsibilities include one or more of the following:

• Assist the GRC team with the relevant Solar Turbines IT compliance program. Act as the lead for IT on key internal control related matters (Compliance, Segregation of Duties, Policies and Procedures, design of controls in systems and process, and evaluation of risk)
• Assist in serving as GRC Specialist and GRC tool administrator, Administer periodic risk assessments, track issues/action plans and drive risk remediation activities to completion. Ensure GRC tool configuration in line with IT Compliance requirements.
• Serve as team representative during weekly Change Review Board to monitor ongoing IT projects which arise to ensure GRC team is aware of all changes and to ensure that all requirements have been fulfilled prior to approval and implementation
• Collaborate with key partners in the business to expand GRC guidance and oversight (including SPE & Solar Digital).
• Perform regular re-performance of management tasks related to IAM provisioning, de-provisioning and periodic access review processes.
• Manage the exception request process and consult as needed
• Maintain accurate records and coordinate response to client security and risk requests

What do we expect from a suitable candidate?

Basic Qualifications:

• Position requires a bachelor’s degree from an accredited college or university in management information systems (MIS), accounting, computer science, information technology, or related field or equivalent work experience.
• 3 or more years of a progressive career in risk management, controls related experience
• Relevant experience in IT Controls or IT Auditing with some background in segregation of duties.

Top candidates will also have:

• Strong project management and prioritization skills. Ability to Multi-task as needed on various projects and initiatives.
• Excellent interpersonal, written, and oral communication skills and presentation skill
• Excellent problem-solving skills
• Proactive, positive, deliberate, and focused thinking
• Three or more years of experience managing timelines and being self-directed preferred
• Ideal candidate has worked with a GRC tool, has some experience with identity and access management (IAM) and has worked with business and IT functional areas to develop and implement mitigating controls.
• ISO27001, SOC-1/SOC-2 experience a plus
• Relevant experience with GRC Software (Archer, AuditBoard, TeamMate etc) a plus
• Knowledge of IT Controls (Access Management, Change Management, Operations Management)
• Good level of English language (written and spoken)

What is Solar Turbines offering to you?

• Excellent professional growth and career opportunities in an international environment of a worldwide leader in a very exciting and growing sector of industry
• Welcoming and friendly atmosphere
• Interesting remuneration package - at Solar we share our achievements with all employees

o Corporate bonus paid once a year

o Performance bonus paid twice a year

• 5 weeks holiday
• Meal allowance
• Cafeteria system 15000 points per year
• Multisport card
• Excellent coffee for free
• Pension or life insurance up to 24 000 CZ/per year
• Language trainings provided by company
• Company events

#LI-MN3

This position requires a 5-days in office schedule.

Any offer of employment may be conditioned upon the successful completion of a background screening.