GRC Exception Management Analyst

Company Details

Berkley Technology Services (BTS) is the dynamic technology solution for W. R. Berkley Corporation, a Fortune 500 Commercial Lines Insurance Company. With key locations in Urbandale, IA and Wilmington, DE, BTS provides innovative and customer-focused IT solutions to the majority of WRBC's 60+ operating units across the globe. BTS's wide reach ensures that ideas and opinions are considered at every level of the organization to guarantee we find the best solutions possible.

Driven by a commitment to collaboration, BTS acts as consultants to our customers and Operating Units by providing comprehensive solutions that not only address the challenge at hand, but proactively plan for the "What's Next" in our industry and beyond.

With a culture centered on innovation and entrepreneurial spirit, BTS stands as a community of technology leaders with eyes toward the future - leaders who truly care about growing not only their team members, but themselves, and take pride in their employees who shine. BTS offers endless ways to get involved and have the chance to grow your career into a wide range of roles you'd never known existed. Come join us as we push forward into the future of industry leading technological solutions.

Berkley Technology Services: Right Team, Right Technology, Simple and Secure.

Responsibilities

Berkley Technology Services (BTS) is hiring an IT GRC Exception Management Analyst reporting to the Senior Director, GRC and will be located in either Urbandale, Iowa, Wilmington, Delaware, or remote would be available for the right candidate. This is an exciting role for an IT GRC analyst to be part of a global Fortune 400 (W.R. Berkley) Governance Risk and Compliance program's operational activities. This role may be filled at the Sr. Analyst level based on the candidate's ability to be a thought-leader, qualified subject matter expert, and proven ability to help drive the program and requirements. Working in concert with other Compliance, Information Technology, Information Security, and Business Unit functions, this role will focus on our exceptions management process to facilitate incoming requests risk triage. On our team, you'll actively engage with technical and compliance/legal teams, business units to perform and advance IT GRC operations exceptions management process. To do this, you'll be hands-on and help drive processes and procedures with other IT GRC professionals dedicated to the mission and vision of Berkley IT GRC operations.

• Become a Subject Matter Expert (SME) on our exceptions process to facilitate the overall process with various stakeholders,
• Exception related information gathering and updates, identify and document exception risks, compensating controls,
• Relate exceptions to policies/standards that exception may impact
• Assess effectiveness of remediation steps and/or compensating controls in order to facilitate a risk assessment and/risk acceptance.
• Ensure that exceptions are moving through the process in a robust/ timely manner.

Qualifications

• Technical background in network, infrastructure, and/or application development disciplines is ideal, or proven ability to review technical components to address control effectiveness and/or risk assessment from a compliance/audit perspective.
• A degree or equivalent, preferably in Information Technology
• Minimum of 2 years of hands-on experience within Governance, Risk, Compliance with an emphasis on control assessments, risk assessments and/or issue remediation
• College Degree, CS, IT or related technical discipline
• Experience within the Insurance or Financial industries, along with relevant certifications as CISA, are preferred
• Hands on experience with GRC tools (i.e. Archer, AuditBoard, OneTrust, etc) preferred
• Proven ability to guide or train others control frameworks and/or control assessments processes using COBIT, UCF, NIST and ISO
• Extremely detail oriented with excellent organizational and planning skills and equally proficient oral and written communication acumen
• Must be a self-starter and able to handle multiple tasks and/or projects concurrently. Comfortable with speaking with both business and technical personnel to document issues and potential impact