EPITEC · 3 hours ago
Information Technology Security Analyst
EPITEC is focused on transforming the Security area as well as Compliance and Regulatory requirements. The Information Technology Security Analyst will provide support for internal and external audit activities and work closely with business partners to identify, assess, and manage IT-related risks.
Responsibilities
Partner with Credit Application Teams to Implement and manage IT Controls
Provide Security & Control consulting to Application teams
Internal Audit and Third-Party Audit Support
Support Credit Internal Controls with IT related controls and deficiencies
Management of Comments identified by the Audit and application teams (development, implementation, and sustainability of Control Improvement Plans)
Conduct reviews of identified IT related audit Comments
Support Application teams with Detailed Risk Assessments and Threat Modeling
Support Vendor Management and Business Owners with due diligence for supplier onboarding
Support Credit Privacy and Compliance Attorneys with IT related regulatory requirements
Monitor GCP-Security Command Center to maintain visibility into the cloud compliance posture
Support Third Party consulting engagements
Maintain accurate JIRA User Stories and Backlog
Ensure the organization meets specific financial industry standards
Qualification
Required
Bachelor's degree in Information Security, Computer Science, Information Systems, Finance, or a related field
7+ experience in relevant field
Strong knowledge of Industry standard IT Controls and best security practices
Solid understanding of corporate policies (Information Security Policy, Finance Manual, Corporate Directives, etc.)
Understand risk and implement mitigating controls
Knowledge of risk management principles, including risk assessment, mitigation, and reporting
Strong leadership skills and results oriented
Continuous controls process improvement mentality
Preferred
Compliance Professional
5+ years of progressive experience in information security, IT risk, Compliance, Audit within a financial services or regulated environment
2+ years of an IT Auditor experience
Preferred candidate will have a proven track record in IT security and controls, demonstrated strong controls mindset
Experience within the Financial Services sector is highly desirable to navigate the complex regulatory requirements
Understanding of Large Language Models (LLMs) and identify opportunities to integrate AI into the compliance lifecycle
Industry Certifications a plus (e.g., CISA, CRISC, CISM, CISSP)
Benefits
Benefits PTOS