Senior Analyst IT Security & Compliance

About the job

Working as part of the IT Risk Management organization, this Senior Analyst is responsible for partnering with IT areas to enable IT risk management priorities. This person will foster strong working relationships with key stakeholder groups including The Hartford Information Protection (THIP), Internal Audit, SOX PMO, and the technology areas.

The role is accountable for understanding IT policy and standards and helps drive a risk-based program for assessing and managing risk in the organization. The role is responsible for effectively communicating with technology areas and partnering with peers in the IT Risk Management organization to implement consistent tools, approaches, and processes that are leveraged across the enterprise.

Primary Responsibilities:

Drive and manage risk to acceptable levels in the organization by developing and employing processes and tools that promote proactive, risk-based approaches to risk management. Work with technology areas to assess IT security risks, monitor appropriate controls and track progress against those commitments.

Examples of activities that support this objective include:

• Execute application and infrastructure risk assessments. Ensure appropriate monitoring and reporting of issues.
• Provide consultation to IT areas to mitigate risk through subject matter expertise of policies and standards and knowledge of technologies and processes.
• Support a common risk management agenda with other key stakeholder groups, including, THIP, Internal Audit, SOX PMO and Privacy. Evaluate and drive mitigation of residual risk.
• Build Cloud risk assessment capability and develop control effectiveness test procedures
• Support the monthly operating report process that provides risk related metrics and activity reports. Utilize critical analysis skills to identify trends, patterns, and areas of concern that needs to be addressed.
• Maintain library of IT Risk Management internal policies and procedures. Assist with governing and facilitating the policy/standard maintenance lifecycle, including driving necessary policy changes.

Qualifications:

• At least 4 years experience in security aspects of multiple platforms, operating systems, software, communications or an equivalent combination of education and work experience.
• Requires excellent communication skills, risk analysis ability, strong judgment, and ability to work effectively with IT staff, audit and security resources

Compensation

The listed annualized base pay range is primarily based on analysis of similar positions in the external market. Actual base pay could vary and may be above or below the listed range based on factors including but not limited to performance, proficiency and demonstration of competencies required for the role. The base pay is just one component of The Hartford’s total compensation package for employees. Other rewards may include short-term or annual bonuses, long-term incentives, and on-the-spot recognition. The annualized base pay range for this role is:

$106,800 – $160,200

Benefits

Our company’s success is due to our employees’ dedication and passion for their work. They are our greatest asset. That’s why we are committed to offering employees and their families a comprehensive benefits package and award-winning well-being programs. By helping our employees achieve their full potential, we unlock our own. Visit

https://www.thehartford.com/careers/benefits for details.

Equal Opportunity Employer/Females/Minorities/Veterans/Disability/Sexual Orientation/Gender Identity or Expression/Religion/Age