Senior Regulatory Compliance Analyst - UAR

Expect more. Connect more. Be more at Diebold Nixdorf.  Our teams automate, digitize, and transform the way more than 75 million people around the globe bank and shop in this hyper-connected, consumer-centric world. Join us in connecting people to commerce in this vital, rewarding role. 

The IT Internal Controls Senior is responsible for supporting IT control improvement activities at the direction of the IT Internal Controls Lead. The incumbent will assist in execution of IT control improvement projects and work with IT to assess risk and opportunities for improvement. This resource will provide consultative services to the IT department in managing the IT General Control framework. The IT Internal Controls Senior will coordinate closely with IT internal/external audit on the execution of any audits and work with the IT Internal Controls Lead to coordinate IT SOX activities.

Primary Responsibilities

• Assists the IT Internal Controls Lead in identifying IT (including Oracle and SAP Applications) improvement opportunities.
• Assists the IT Internal Controls Lead in managing the IT SOX scope with IT, internal audit and external audit and identifies opportunities to improve the efficiency of the IT SOX program.
• Administers the general user access review program focusing on a variety of key systems (i.e., pulling, communicating, following up, analyzing, and concluding on user access data)
• Assists the IT Internal Controls Lead in identifying additional uses for Oracle GRC
• Manages rule setup within Oracle GRC
• Assists the IT Internal Controls Lead in the coordination of IT external (KPMG) and internal audit activities.
• Executes day-to-day IT related activities within the Internal Controls department.
• Assists in the execution of IT control improvement projects (as time and skillset permits)
• Provides consultative support to IT partners and offers proactive, and practical, control improvement insight.

Baseline Skillsets

• Demonstrates IT acumen – Ability to understand broad range of IT issues and IT processes quickly (i.e., processes for change management, schedules jobs, user access and automated control design)
• Effective communication – Able to adjust communication style to deliver messages to management – understands the level of information required and can simplify complex matters for discussion.
• Teaming – Ability to work effectively across business and business functions and bring stakeholders together to solve problems and build consensus in a remote environment while building positive relationships, collaborates with intent, and gains other’s confidence.
• Analytical thinking – Able to quickly process data and facts to arrive at a logical conclusion and ask well thought out questions that contribute to identifying an answer/solution. 
• Problem solving – Able to think beyond current processes and develop improved ways of performing processes (can think well beyond “this is how we’ve always done it”)
• Evaluate and assess risk – Evaluate risk and prioritize actions based on risk and impact to the organization.
• Understands the necessity and value of accuracy and attention to detail. Demonstrates the ability to process information with elevated levels of accuracy. Develops and uses checklists to ensure information goes out error-free. Learns from mistakes and applies lessons learned.
• Performs work in an organized, objective, and effective manner, and acclimated to perform follow up activities.

Technical Skillsets

• Process walkthrough performance (i.e., identification of controls] and documentation skills [i.e., Windows- Vizio flowchart suite, etc.) 
• Oracle Applications – Basic understanding of Oracle Applications and experience assessing controls within an Oracle Applications environment.
• Oracle GRC – Basic understanding of the GRC tools and demonstrates ability to learn technical details of Oracle GRC quickly with the right leadership.
• IT General Controls – Basic understanding of the COBIT framework and has implemented or managed an IT controls framework based on COBIT.
• Information Technology – Demonstrates an understanding of the IT environment and the typical responsibilities of various IT functions.
• Information Security – Basic understanding of the principles of information security.
• IT Systems Development Lifecycle (SDLC) – Basic experience assessing a SDLC or implementing systems using a formalized SDLC.

Required Qualifications

• 2-4 years’ experience executing IT SOX control improvement projects per the requirements listed in this role description.
• Degree in Information Systems or Related field 
• UAR (User Access Review) Administration Experience