IT Risk & Compliance Analytics Analyst Sr
Stericycle
- Bannockburn, IL
- Permanent
- Full-time
- Execute the end-to-end centralized User Entitlement Reviews for organization, which includes the UER data preparation, ETL (Extract, Transform, Load) in UER data tools (Alteryx), monitoring of reviews while in process, perform post-access removal validation activities, and risk assessment of access removals for many applications across the organization.
- Support the development, testing, and implementation of necessary UER tool updates to ensure completeness and accuracy of user access.
- Collaborate with cross-functional teams to gather and understand business requirements for implementing applications within UER tools, including understanding access provisioning processes and technical architecture for security across various applications.
- Apply analytical and critical thinking skills to identify potential risks, weaknesses, and compliance issues, and risk assessment processes in user access controls. Track and remediate access compliance issues in a timely manner. Proactively address issues that may result in the UER data being inaccurate.
- Apply technical knowledge to map and execute ETL processes in the user access review workflow.
- Maintain standard operating procedures, documentation of vocabulary and best practices to optimize the user access review process.
- Lead troubleshooting activities and data tracing to ensure data transformation integrity when questions arise.
- Utilize data analysis techniques, including SQL queries, to assist in reviewing access data for accuracy and completeness.
- Contribute to maintaining compliance with relevant auditing standards throughout the user access review process.
- Communicate with various internal stakeholders and external auditors to explain how the UER process works both technically and functionally.
- Bachelor's degree in Business Analytics, Information Systems, or a related field.
- Basic understanding of auditing standards and their application to user access reviews.
- 5+ years of experience in a fast-paced professional role.
- Previous audit, controls, process and/or IT audit is preferred, not required.
- Licenses and Required Competencies
- Strong ability to analyze business requirements and translate them into practical review strategies and quantitative analytics.
- Detail-oriented mindset with an ability to spot patterns, anomalies, and potential risks.
- Solid problem-solving and critical-thinking skills and demonstrates the ability to be a self-starter who can utilize their strong problem-solving skills to generate creative solutions to complex issues.
- Strong ability in combining technical knowledge with business understanding.
- Strong commitment to maintaining ethical standards and confidentiality.
- Familiarity with troubleshooting activities and data tracing techniques.
- Strong communication and written skills - Demonstrates the ability to present ideas and information in a clear, concise, organized, and diplomatic manner; listen to others to respond effectively to ideas and questions.
- Deals openly and honestly with people in all levels of the organization while building credibility and maintaining trust. Exhibits empathy and sensitivity for the needs of others. Is perceived by others as being helpful and supportive.
- Demonstrate the ability to deal with changing priorities and multi-task several projects with the ability to succeed well under pressure, grasp new ideas quickly. Possess an “all in” attitude and embrace the ability to be part of a High-Performance team, focusing on adapting and overcoming obstacles.
- Demonstrate the ability to generate new ideas; recognize the need for and develop new approaches to problem resolution.
- Demonstrate the ability to efficiently manage own time, activities and resources. Identify specific activities required to accomplish objectives and take action to achieve desired results; prioritize complex multiple activities and projects.
- Technical Skills:
- Familiarity with data modeling and data mapping techniques
- Proficiency in data analysis using SQL queries, basic data types, and joins.
- Familiarity with Alteryx or a similar ETL tool.
- Familiarity with SQL, database management, data transformation, and data completeness concepts.
- Familiarity with data transformation techniques and data visualization tools.
- Basic knowledge of database vocabulary and its relevance to user access review processes.
- Intermediate to advanced level skills using Microsoft office products including Word, PowerPoint, and Excel.
- Intermediate to advanced skills in Excel using functions such as VLOOKUP, INDEX-MATCH, and SUMIFS for data manipulation and analysis.
- Other (i.e., travel, etc. that is not covered above): Occasional travel may be required for training and support functions. In the office 3 days a week, with ad-hoc flexibility as needed.