Job Description

IT Risk and Compliance Analyst 1

About Us

Republic Services is an industry leader in U.S. recycling and non-hazardous solid waste. Through our subsidiaries, Republics collection companies, recycling centers, transfer stations, and landfills focus on providing effective solutions to make proper waste disposal effortless for our 14 million customers. Well handle it from here., our brand promise, lets customers know they can count on Republic to provide a superior experience while fostering a sustainable Blue Planet for future generations to enjoy a cleaner, safer and healthier world.

Why Work with Us
Our Company cannot thrive without great people devoted to serving customers, the community and the planet. We hire the best people to make Republic a great place to work. We are focused on attracting talented individuals across professions who are as committed to serving customers and the planet as we are. We strive to create a workplace that's meaningful and rewarding to our 33,000 employees. That's why we are proud to be recognized as Best Large Employer by Forbes, Worlds Most Ethical Companies by Ethisphere, and Human Rights Campaign Foundations 2018 Corporate Equality Index.

Job Description

POSITION SUMMARY:

As a member of the Cyber Security group, the IT Risk and Compliance Associate collaborates with IT, Internal Audit and various other departments to drive effective risk and control management. The associate assists with the evaluation and rationalization of IT controls in the context of IT SOX audits, PCI audits and Cyber compliance audits; and performs enterprise cyber and technology risk assessments including third-party Cyber risk assessments.

PRINCIPAL RESPONSIBILITIES:

* Evaluates IT controls to reduce the impact of internal and external IT audits.
* Controls rationalization to simplify the IT control environment.
* Evaluates/interprets SOX IT Audit and PCI DSS requirements and provides guidance to process and control owners on the objective / intent of the requirements.
* Assists project teams to evaluate IT risk and compliance considerations for projects.
* Assists with enterprise cyber and technology risk assessments.
* Helps perform third-party cyber risk assessments.
* Collaborates with business units to deliver enterprise risk assessment results; and identifies solutions to minimize risk exposure.
* Performs other job-related duties as assigned or apparent.

QUALIFICATIONS:

* Bachelors Degree in Information Security, Accounting and Information Systems, IT Risk Management.
* Big 4 experience in the IT Audit and Advisory domain. (Preferred)
* Experience with GRC tools and policy / procedure development.
* Certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), GIAC Critical Controls Certification (GCCC), or GIAC Security Essentials (GSEC).
* Intermediate to advanced proficiency in the use of Microsoft Office products, including Word, Excel and PowerPoint.
* Strong technical, analytical and problem-solving skills.
* Strong communication skills to effectively interact with internal and external partners on all levels to resolve issues and provide solutions in a timely manner.

MINIMUM QUALITIFICATIONS:

* Minimum of 1-2 years of experience in IT Audit, IT Risk Management or IT Compliance.
* Prior exposure to, and experience with, SOX IT and PCI DSS audits.

The statements used herein are intended to describe the general nature and level of the work being performed by an employee in this position and are not intended to be construed as an exhaustive list of responsibilities, duties and skills required by an incumbent so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of the Company.

Republic Services is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, genetic information, or any other characteristic protected by applicable law.

The statements used herein are intended to describe the general nature and level of the work being performed by an employee in this position, and are not intended to be construed as an exhaustive list of responsibilities, duties and skills required by an incumbent so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of the Company.

Rewarding Compensation and Benefits

Eligible employees can elect to participate in: Comprehensive medical benefits coverage, dental plans and vision coverage. Health care and dependent care spending accounts. Short- and long-term disability. Life insurance and accidental death & dismemberment insurance. Employee and Family Assistance Program (EAP). Employee discount programs. 401(k) plan with a generous company match. Employee Stock Purchase Plan (ESPP).

Posted Date: 2/1/2021 6:21:02 PM

Job Type: Exempt

Req : R-034001

Location: AZ-Scottsdale-14400 N. 87Th Street (85260)

Job Category: Information Technology