IT Risk Analyst (Governance)

Summary: Dime Commercial Bank (Dime) is currently hiring for an IT Risk Analyst (Governance) at its Headquarters in Hauppauge, Long Island. The IT Risk Analyst is responsible for identifying, evaluating, and mitigating potential threats to an organization's information technology systems. As an IT Risk Analyst, we will need a liaison on Internal and External Audits, User Access Reviews, and other IT Governance job functions. Attention to detail and strong communication skills (verbal and written) are key.

Salary commensurate with experience, ranging from $65,000 to $76,000 annually. The exact compensation may vary based on relevant experience, skills, education, training, licensure and certifications, and location.

All applicants must attach a recent resume. This role is an in-office role.

Responsibilities:

• Lend specific subject matter knowledge of IT general controls as they relate to the Audit reporting process, working with client engagement teams within assurance and/or risk advisory.
• Collaborate with other members of the engagement team to plan engagement and develop work program timelines, risk assessments, and other planning documents.
• Use knowledge of current IT environment and industry IT trends to identify engagement and client service issues and communicate this information to engagement team and client management through written correspondence and verbal presentations.
• Recognize relevant IT issues from basic analysis and identify potential non-compliance standards.
• Understand user access process and be able to help with user access reviews.
• Support security assessments, audits, and compliance activities for internal systems and government programs.
• Maintain and monitor access recertification process.
• Analyze reports, assess gaps, plan remedial activities, and implement controls.

Qualifications:

• Bachelor’s degree in business, computer science, information systems, engineering, or a related discipline preferred.
• Minimum 2 years’ experience working as an IT auditor, or an IT Governance or IT risk adviser for a bank, a professional services firm, or within industry.
• Experience with at least one of the following types of work: a) internal audit risk assessment; b) financial statement audits/SOX/internal controls; c) SOC reporting.
• Excellent communication skills, both written and verbal to be able to articulate complex IT risks in simple business terms.
• Strong interpersonal skills and ability to develop effective trustworthy relationships with IT department and business stakeholders.
• Accustomed to staying on top of Information Security current affairs, business continuity, data management, security and encryption, and vulnerability analysis and audit.
• Excellent problem solving and self-management skills in order to solve technical problems tactically and analytically and successfully handle management information and metrics design, collection, analysis, reports, etc.