Senior Analyst, IT Audits and Compliance - Charlottesville, United States - University of Virginia

Description

Senior Analyst, IT Audits and Compliance

The University of Virginia (UVA), one of the nation's leading public institutions, seeks an experienced and detail-oriented senior systems analyst to join our central Information Technology Services (ITS) unit. This position will specialize and focus on IT audit findings and responses, remediation activities, IT disaster recovery planning, and IT continuity of operations planning, as well as other business analysis activities pertaining to IT risk mitigation. Reporting to the Deputy Chief Information Officer, this position will work closely with the various Associate and Assistant VPs reporting to the CIO, and their technical teams, to understand our technical infrastructure and the supporting technical and procedural risk controls.

ITS at UVA is a phenomenal place to lead, grow, and deliver impact. It's an organization that values results and teamwork. We like the people we work with and the work we get to do. We strive to create a welcoming and supportive workplace where everyone feels empowered to be their authentic selves and share ideas. We embrace a commitment to diversity, equity, and inclusion. ITS values work-life balance and provides workplace flexibility where possible. Please see additional information about joining our team .

Anticipated salary range based on experience and qualifications ($90,000-$110,000)

Primary Responsibilities:

• Engage extensively with internal and external audit organizations and risk management/compliance teams on matters pertaining to ITS services, operations, processes, and technical controls.
• Engage and collaborate with all levels of ITS staff to interview technical teams, gather, and analyze information, and author/document information for audits and compliance assessments. Track, document, and manage all ITS responses to any audit or compliance findings and proactively ensure that the DCIO and the ITS leadership team are well informed of pending issues and responses.
• Work closely with solution architects, system administrators, and other technical subject matter experts to understand the technology and processes deployed with the systems and applications being reviewed by auditors.
• Identify opportunities for process improvement and optimization within existing IT systems and business processes.
• Author, document and track the prioritized remediation status of audit and assessment observations and findings and regularly prepare remediation status reports for ITS leadership; proactively ensure that audit concerns are addressed to reduce/eliminate repeat findings.
• Collaborate with ITS leadership and staff to conduct regular (e.g., quarterly) assessments and disposition reviews of all open/outstanding security/risk remediation items. Facilitate ITS leadership/management discussions and efforts toward risk management/remediation prioritization and associated rationale. Prepare documents and briefs as appropriate.
• Facilitate and coordinate annual reviews of the ITS Disaster Recovery plan, ensuring that appropriate updates/additions/removals are documented, along with corresponding document change log notations. Analyze and assess needed modifications to Disaster Recovery plan as systems and service offerings are introduced, modified, or retired.
• Facilitate and coordinate annual reviews of the ITS Business Continuity plan, ensuring that appropriate updates/additions/removals are documented, along with corresponding document change log notations.

Ideal Candidate Profile:

• Bachelor's Degree or equivalent demonstrated work experience
• Relevant professional qualifications (e.g. CBAP, CISA, CISM, CISSP, Internal Audit Practitioner, Certified Internal Auditor, etc.)
• At least 5 years of relevant IT work experience, with direct experience managing/responding to IT system audits and developing/tracking risk management plans and audit remediation plans
• Sound knowledge of IT risk and control frameworks and relevant regulatory requirements
• Demonstrated ability to analyze complex problems, propose innovative and balanced solutions, and make decisions to keep projects, initiatives, and tasks on track
• Demonstrated business acumen, with the ability to articulate and understand IT risk in relation to the business need and the technology options/constraints
• Exceptional attention to detail
• Excellent verbal and written communicator
• Knowledgeable in IT project management principles and methodologies

UVA ITS is an equal opportunity employer committed to creating and supporting a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity, marital status, national or ethnic origin, political affiliation, race, religion, sex (including pregnancy), sexual orientation, veteran status, and family medical or genetic information.

How to Apply:

Ready to embark on this exciting opportunity? Visit our job link to complete an online application. Be sure to attach a compelling cover letter expressing your interest and showcasing your skills, along with your resume or CV.

For inquiries about the application process, contact Bill Crane, Senior Academic Recruiter, at .

UVA ITS is proud to be an equal opportunity employer committed to fostering a diverse and inclusive work environment. We encourage all qualified applicants to apply.

Discover more about UVA and the vibrant Charlottesville community at and . Join us in shaping the future of technology at UVA

MINIMUM REQUIREMENTS
Education: High School Diploma, Bachelor's Degree Preferred.
Experience: 5 years.
Licensure: None.
PHYSICAL DEMANDS
This is primarily a sedentary job involving extensive use of desktop computers. The job does occasionally require traveling some distance to attend meetings, and programs.

The University of Virginia, i ncluding the UVA Health System which represents the UVA Medical Center, Schools of Medicine and Nursing, UVA Physician's Group and the Claude Moore Health Sciences Library, are fundamentally committed to the diversity of our faculty and staff. We believe diversity is excellence expressing itself through every person's perspectives and lived experiences. We are equal opportunity and affirmative action employers. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, race, religion, sex (including pregnancy), sexual orientation, veteran status, and family medical or genetic information.

View or Apply

To help us track our recruitment effort, please indicate in your email – cover/motivation letter where ) you saw this job posting.