Technology Risk Analyst / It Audit

The primary objective of this position is to critically assess the completeness and accuracy of technology and cybersecurity key risk indicators. This involves performing risk assessments, evaluating existing processes, and documenting processes, risks, and controls in the organization’s technology environment. This will be accomplished by partnering with clients, performing comprehensive review of Infrastructure Technology processes, and identifying key issues.

Specific responsibilities for this role are as follows:

• • Collaborate effectively within the ETS G&C Team, to support several Governance & Control functions that will leverage parent process information and documentation.
• • Research, learn, and apply knowledge to keep up with next-generation technologies in the environment and promote credibility with our partners
• • Review the design and operating effectiveness test workpapers performed by the RCSA team
• • Use Microsoft Visio or Lucid chart to map out steps in a process
• • Ensure documentation meet Manulife’s standard of quality
• • Review the processes and controls supporting how data used to calculate the KRIs are sourced, transformed, and reported
• • Contribute to the growth and success of our ETS Governance & Control Team by adapting to an ever-changing technical environment
• • Evaluate the People, Processes, and Technologies that support a key risk indicator
• • Document end-to-end process narratives

Recommended Skillset:

• • Strong communication skills
• • Ability to read and understand query logic (i.e., SQL, Python, e.t.c)
• • Understanding of NIST Cybersecurity framework
• • Understanding of Enterprise technology and IT infrastructure
• • Understanding of IT Risk and Controls
• • Understanding of IT governance
• • Strong analytic skills
• • Microsoft Visio
• • Strong Data analysis skills
• • Technology audit
• • Understanding of cybersecurity and technology risk
• • Excel, PowerPoint and Word

You bring:

• • Bachelor’s degree related to Information Systems, Computer Science, Information System Auditing
• • Excellent problem solving, analytical skills, including the ability to hold client meetings, obtain evidence, and properly document workpapers independently.
• • Strong written and verbal communication, ability to effectively collaborate with multiple stakeholders
• • Strong understanding of audit methodologies, control test execution, risk, and remediation efforts
• • Highly analytical with strong organizational and problem-solving skills
• • Strong understanding of controls, audit and risk management
• • Professional certification(s) related to audit or information risk management such as CISA, CISSP, CISM, CISA, GIAC, CRISC preferred
• • 3+ years of Technology Audit, SOX IT Audit or Technology RCSA experience
• • Experience documenting a process from End-to-End, such that the document becomes a point of reference for internal and external stakeholders.
• • Experience with reviewing Processes, identifying risks and mapping controls to the risks.