Willingness to learn/use ITRC tools (e.g., ProcessUnity, Black Kite) and support ITRC team lead with supply chain cyber risk program management Primary Responsibilities: * Conduct readiness ...
Quick apply
Willingness to learn/use ITRC tools (e.g., ProcessUnity, Black Kite) and support ITRC team lead with supply chain cyber risk program management Primary Responsibilities: * Conduct readiness ...
Processunity information
What are some common challenges faced by ProcessUnity administrators, and how can new hires best prepare for them?
ProcessUnity administrators often encounter challenges such as adapting the platform to unique organizational workflows, managing data integration with other systems, and ensuring user adoption across departments. New hires can best prepare by familiarizing themselves with ProcessUnity's configuration options, staying up-to-date on platform updates, and actively communicating with stakeholders to understand their process needs. Proactive learning and collaboration with IT and risk management teams are key to overcoming these challenges and ensuring a smooth implementation.
What are the key skills and qualifications needed to thrive as a ProcessUnity Administrator, and why are they important?
To thrive as a ProcessUnity Administrator, you need a strong understanding of risk management principles, business process analysis, and experience in governance, risk, and compliance (GRC) frameworks, often supported by a degree in business or IT. Familiarity with the ProcessUnity platform, data integration tools, and relevant certifications such as ProcessUnity Certified Administrator are typically required. Excellent problem-solving, communication, and stakeholder management skills help you effectively implement and support risk management solutions. These skills ensure efficient GRC processes, accurate risk assessment, and successful adoption of the ProcessUnity platform within an organization.
What is ProcessUnity and what does a ProcessUnity specialist do?
ProcessUnity is a cloud-based risk and compliance management platform that helps organizations manage third-party risk, policy, and compliance processes. A ProcessUnity specialist is responsible for implementing, configuring, and maintaining the ProcessUnity platform to suit an organization's needs. They often work with stakeholders to design workflows, manage vendor assessments, and ensure regulatory compliance. Specialists also provide user training, support, and may analyze data to improve risk management strategies.
What are popular job titles related to Processunity jobs in Walnut Creek, CA? For Processunity jobs in Walnut Creek, CA, the most frequently searched job titles are:
What job categories do people searching Processunity jobs in Walnut Creek, CA look for? The top searched job categories for Processunity jobs in Walnut Creek, CA are:
Job description
Job Title: IT Risk & Compliance Analyst
Job Location: San Francisco, CA 94104
- Please local candidates that are able to work hybrid work schedule, Tuesday and Wednesday, at the SF Offices.
Job Duration: 6 months (Possibility of extension)
Qualifications (Must Have):
- Ability to map key Information Security and Technology controls identified in policies, standards, and process documents to industry frameworks such as NIST CSF, NIST 800-53, CSA CCM, CIS v8.1, and regulatory requirements in FHFA Advisory Bulletins.
- Interpret compliance information to create a recurring cadence of reports of open findings, observations, self-identified issues, progress on risk and compliance initiatives.
- Willingness to learn/use ITRC tools (e.g., ProcessUnity, Black Kite) and support ITRC team lead with supply chain cyber risk program management
Primary Responsibilities:
- Conduct readiness assessments, including reviews of relevant documentation in advance of audits, 2LOD assessments, and external assessments.
- Maintain the inventory of SOX IT General Controls (ITGC) and control tests in ServiceNow, updating as directed, and identifying opportunities for improvements in reporting and in using automation.
- Liaison between control owner and internal auditors, and 2LOD assessors during audits and assessments, responsible for supporting control owners in the timely submission of artifacts.
- Ability to map key Information Security and Technology controls identified in policies, standards, and process documents to industry frameworks such as NIST CSF, NIST 800-53, CSA CCM, CIS v8.1, and regulatory requirements in FHFA Advisory Bulletins.
- Ability to identify and document technology processes.
- Manage the LogicGate Governance Library ensuring Information Security and Technology documents align with approval and publication requirements, relying equally on automated reminders as well as active engagement with document owners.
- Maintain ITRC document archives in the ITRC shared repository.
- Responsible for reporting status at a recurring cadence of open findings, observations, recommendations, and self-identified issues, and for submitting formal audit observation closure documentation.
- As directed by the ITRC MD, document and report the progress and value of in-flight ITRC initiatives, identified risks, and planned initiatives.
- Provide compliance review of requests for deviations from Information Security and Technology policies and standards, confirming compliance with Technology Exception requirements for components such as compensating controls, risk assessment, and documentation supporting exception request rationale.
- Participate as a key stakeholder in the Architecture Assessment Review process, documenting meeting decisions, tracking deliverable commitments, and ensuring next steps are completed for proposed new technologies or changes in existing technologies.
- Support ITRC team members as needed in conducting third-party security risk assessments for changes to existing third parties or proposed third party technologies.
Skills/Knowledge:
- Required Core Competencies: Customer Focus, Decision Quality, Ensures Accountability, Drives Results, Drives Engagement, Collaborates, Values Differences, Communicates Effectively with all levels of staff and management, Instills Trust
- 3 - 5 years of experience in technology risk or IT audit.
- Knowledge and experience with technology frameworks is required, e.g., CIS v8.1, CSA CCM, CoBIT, NIST, ITIL, et al.
- Knowledge of Operational Risk Management and Technology Risk Management.
- Demonstrated ability to promote teamwork, act as a change agent, effectively remove obstacles, maintain high level of morale and motivation, and lead by example.
- Familiarity with SOX ITGC
- Must be proficient with Microsoft Office (Word, Excel, PowerPoint) and Microsoft SharePoint.
- Must have strong communication skills and be able to effectively communicate with all functional levels of the organization.
- Project management, planning, problem-solving and organizational skills required, preferably using Atlassian JIRA
- Strong analytical, issue identification, prioritization, resolution, and report writing skills required.
- Must be proactive and must be able to meet established deadlines.
- Experience with a Governance, Risk and Compliance (GRC) tool is highly desirable, preferably ServiceNow and LogicGate.
- Ability to learn use of the ProcessUnity/CyberGRX third party risk management platform
About Superbeo
Sourced by ZipRecruiter