Project Coordinator Ref# 7096 - Albany, United States - Information Technology Services, Office of

Mark Lane

Posted by:

Mark Lane

beBee recruiter


Description

Minimum Qualifications


Bachelor's degree in information technology, cyber security, business management, accounting, or related field and five (5) years of experience in the areas of audit, risk management, governance, information security, and/or compliance, including at least three (3) years managing risk tools at the enterprise level, and at least two (2) years of supervisory experience.

The following education/experience may be substituted: Four (4) years of experience or an associate's degree in a related field and two (2) years of experience, plus five (5) years of experience, as detailed above.


  • A master's degree or J.D. may substitute for one (1) year of experience.
  • A Ph. D. may substitute for two (2) years of experience.

Duties Description


Under the direction of the Director of Internal Controls within the Chief Risk and Data Privacy Office (CRDPO), Enterprise Risk Management, Internal Controls unit, the incumbent will be responsible for gathering requirements and building the CRDPO's Governance, Risk, and Compliance (GRC) tool through collaboration with multiple teams to support the ongoing evaluation of ITS risk and security processes, their formalization, and their continuous improvement.


Duties include, but are not limited to:

  • Elicit requirements using techniques such as interviews, surveys, and documentation reviews; document requirements for the implementation of the CRO GRC tool.
Assist with driving the successful implementation of the CRO's GRC tool including:


  • Risk Assessments
  • Enterprise Risk Register
  • Findings Register
  • Business Process Documents
  • Data Dictionary Documents
  • Business Process Flow Diagrams
  • Test Plan Documents
  • Risk Assessment templates
  • Mapping Enterprise Risk Management Frameworks (ex. COSO & NIST)
  • Map & maintain an organizational hierarchy of the agency
  • Integrate controls into the GRC tool as they relate to SSA & IRS's SSR compliance reviews for tracking ownership, compliance & remediation
  • Integrate ERM with the Policy Management, Internal Controls, & Privacy modules
  • Establish, document, and maintain system access controls
  • Research, document, and maintain documentation of current or "asis" business processes, functions, and systems.
  • Assist in developing standard documentation that can be used for the Risk Management Program.
  • Identify, understand, and integrate additional tools with the GRC tool, such as Service Now, Tableau, and TeamMate where data is stored/processed for possible integration via imports
  • Attend and facilitate regular meetings with stakeholders while documenting any decisions and tracking issues to ensure they are resolved
  • Communicate technical issues and information effectively, both verbally and in writing
  • Gather requirements to develop and implement standard Risk Assessment reporting & Dashboards
  • Collaborate effectively within a team environment
  • Assist with installation, updates, and configuration of the GRC system working with Operations to ensure system is regularly being updated and maintained
  • Act as a liaison between the users and technical team members
  • Provide troubleshooting support
  • Continue to develop current knowledge of ERM through relevant course completion and obtaining annual Continuing Professional Education (CPE) credits
  • Perform the full range of supervisory responsibilities.

Additional Comments
NYS is an equal opportunity employer.
We are also recruiting for this role in NYC.
Some positions may require fingerprinting and background checks.
Benefits of Working for NYS

Generous benefits package, worth 65% of salary, including:
Holiday & Paid Time Off

  • Thirteen (13) paid holidays annually
  • Up to Thirteen (13) days of paid vacation leave annually
  • Up to Five (5) days of paid personal leave annually
  • Up to Thirteen (13) days of paid sick leave annually for PEF
  • Up to three (3) days of professional leave annually to participate in professional development
Health Care Benefits

  • Eligible employees and dependents can pick from a variety of affordable health insurance programs
  • Family dental and vision benefits at no additional cost
Additional Benefits

  • Up to 50% telecommuting
  • New York State Employees' Retirement System (ERS) Membership
  • NYS Deferred Compensation
  • Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
  • Public Service Loan Forgiveness (PSLF)
  • And many more.
Some positions may require additional credentials or a background check to verify your identity.

More jobs from Information Technology Services, Office of