Senior IT Risk and Governance Analyst

Holland America Line has been exploring the world since 1873. Our ships offer innovative features and enriching experiences focused on destination exploration and personalized travel, inviting guests to savor the journey.

We’re looking for an amazing Senior Analyst, IT Risk and Governance to fill this role. This is a hybrid, in-office role. You’ll work in person at our Miami or Seattle Office Tuesday to Thursday each week. You’ll be responsible for maintenance, coordination, execution, and continual improvement of our recently transition ITCG Control coordination, DR Program, and other brand specific governance activities. In execution, the Senior Analyst will coordinate project scopes, objectives, deliverables, and timelines with all stakeholders; developing strategies and action plans for all required annual activities from initiation to closure. They will also provide subject matter expertise, training and assurance on proper control execution and lead quality assurance reviews. The Senior Analyst will facilitate annual testing, track progress, identify risks and issues, and implement corrective actions to ensure success, collecting all necessary documentation and evidence in support of compliance activities. Additionally, the Senior Analyst will partner with technical team to develop, test and documents testing scripts. The Senior Analyst will communicate governance-related technical information to team members and coordinate regular status reports to leadership on status and milestones.  Including, elevating risks in a timely and appropriate manner and facilitation of regular risk reviews and mitigation steps.  Finally, the Senior Analyst will act as an advocate for brand-specific governance activities, ensuring we are adhering to internal and external standards via training and awareness programs to ensure all stakeholders understand their roles and responsibilities for ITCG Controls and DR Program.

Here’s a summary of what Holland America Line is looking for in its Senior Analyst, IT Risk and Governance. Is this you?

Responsibilities

• Lead the maintenance, coordination, execution, and continual improvement of ITCG Control and compliance testing, including all assessment and remediation activities.   
• Drive the maintenance, coordination, modernization, annual testing of our Disaster Recovery Program (DR) in partnership with business departments that aligns with our organizational goals and ensuring compliance with global standards and policies.
• Develop and assess completeness of testing scripts and tools in coordination with supporting stakeholders and IT support resources.  Act as subject matter expert in advisement to control owners and executing quality assurance activities.
• Collect and maintain all critical ITCG Control, DR, and general compliance documentation and testing evidence pertaining to process, plans, requirements, and annual testing.
• Define and communicate project scopes, objectives, deliverables, and timelines for compliance projects in coordination with stakeholders.
• Prepare and present reports and recommendations to senior management and executive leadership on the status of compliance programs and projects.
• Elevate risks in a timely manner and facilitate regular risk reviews, mitigation steps, making recommendations for enhancements to the program as necessary
• Develop and facilitate training and awareness programs to ensure all stakeholders understand their roles and responsibilities for ITCG Controls and DR Program.
• Partner and foster relationships with both internal and external leadership and stakeholders, including audit and global information security team for plan and program development, maintenance, annual testing, and remediation activities.
• Supports implementation of compliance technical tools.

Requirements

• Bachelor’s degree in computer science, Information Security, Management Information Systems, or related field or equivalent professional experience
• 5+ years’ experience in related job area (IT Governance, IT Audit, forensics/eDiscovery, Disaster Recovery)
• Experience in developing and executing SOX and ITCG Controls.
• Ability to understand and condense complex technical concepts down into plan language.
• Applied understanding of governance control and Disaster Recovery frameworks and best practices.
• Strong computer skills foundation, including Microsoft Office suite PowerPoint Skills
• Technical understanding control application across IT environments.