Senior First Line Risk & Control Analyst

<p><b><span>Key Responsibilities</span></b><span> </span></p><p><span><span>On a day-to-day basis, this position will perform responsibilities such as some or all of the following:</span></span><span> </span></p><ul><li><p><span><span>Review</span><span> implementation of control requirements and </span><span>appropriate information</span><span> technology (IT) policies and procedures that are consistent with the organization's mission and goals</span></span></p></li><li><p><span><span>Identify</span><span> </span><span>and</span><span> report on</span><span> the determination of gaps in design or controls that </span><span>exist,</span><span> and provide recommendations for remediation and implementation of mitigating controls</span></span></p></li><li><p><span><span>Identify</span><span> control requirements specific to an information technology (IT) system in all phases of the </span><span>system</span><span> life cycle</span></span></p></li><li><p><span><span>Collaborate with the first line in the development of action plans to assess the adequacy of action taken by management to remediate open items</span></span><span> </span></p></li><li><p><span><span>Drive</span><span> compliance/audit activities as assigned in relation to Sarbanes Oxley (SOX), IT Control Framework, Service Operation Control audits, manage internal/external audit engagements, and third-party business reviews</span></span><span> </span></p></li><li><p><span><span>Support </span><span>control assessments first time and ongoing (Process, Application, and Infrastructure)</span></span></p></li><li><p><span><span>Participate in the policy standards implementation strategies to ensure procedures and guidelines </span><span>comply with</span><span> the applicable control policy. </span></span><span> </span></p></li><li><p><span><span>Drive and support</span><span> the development and implementation of goals, policies, priorities, and procedures relating to internal controls</span></span><span> </span></p></li><li><p><span><span>Drive</span><span> audit findings and recommendations to ensure that </span><span>appropriate mitigation</span><span> actions are taken</span></span></p></li><li><p><span><span>Support necessary compliance activities (e.g., ensure that system security configuration guidelines are </span><span>followed,</span><span> and compliance monitoring occurs)</span></span></p></li><li><p><span><span>Assess, define, and execute on control optimization </span></span></p></li><li><p><span><span>Support the verification that all acquisitions, procurements, and outsourcing efforts address control requirements consistent with the organization's goals and </span><span>objectives</span></span><span> </span></p></li><li><p><span><span>Support the</span><span> key </span><span>stakeholders</span><span> throughout Aegon on the IT control framework and the control consultant </span></span><span> </span></p></li><li><p><span><span>Engage and collaborate with the second line to </span><span>demonstrate</span><span> the design and operating effectiveness of controls</span></span><span> </span></p></li><li><p><span><span>Support </span><span>Cloud AWS (Amazon Web Services), Microsoft Azure control implementation, </span><span>monitoring,</span><span> and reporting.</span></span><span> </span></p></li></ul><p><span> </span></p><p><b><span>Qualifications and Skills</span></b><span> </span></p><ul><li><p><span><span>Bachelor’s degree or equivalent knowledge in risk management and controls</span></span></p></li><li><p><span><span>Minimum 4  years of experience working with internal controls, audit, or risk management within the financial services industry</span></span></p></li><li><p><span><span>Excellent communication skills in writing and communicating information in a clear, concise manner</span></span></p></li><li><p><span><span>Proven analytical, critical thinking, and </span></span><span><span>problem-solving </span></span><span><span>skills </span></span><span> </span></p></li></ul><p><span> </span></p><p><b><span>P</span><span>referred Qualifications</span></b><span> </span></p><ul><li><p><span><span>CISA, CISSP, CISM, or CIA recommended</span></span></p></li><li><p><span><span>Ability to understand technology, management, and leadership issues related to organizational processes and problem-solving</span></span></p></li><li><p><span><span>Knowledge of Audit Assurance Framework requirements</span></span></p></li><li><p><span><span>Financial services experience </span></span><span> </span></p></li><li><p><span><span>Experience with GRC solutions </span></span><span> </span></p></li><li><p><span><span>Knowledge of public cloud providers (AWS, Azure, etc.)  </span></span><span> </span></p></li><li><p><span><span>Big 4 public accounting experience working with controls within the Sarbanes-Oxley environment.</span></span></p></li><li><p><span><span>Knowledge of current industry methods for evaluating, implementing, and </span><span>disseminatin