Senior Specialist, IT Risk and Compliance

Summary

The Senior Specialist, IT Risk and Compliance requires extensive experience with Regulatory Compliance (IT SOX, NIST, ISO) in order to be capable of managing IT controls and monitoring activities while coordinating IT compliance projects. The incumbent will interact with internal and external stakeholders and provide support and guidance around IT policies, risk and compliance.

Detailed Description

Performs tasks such as, but not limited to, the following:

• Ensures IT controls are regularly tested/assessed and provides solutions for mitigation where required
• Implements effective monitoring and assessment processes and provides guidance where needed to address any potential gaps
• Develops and supports project management processes, guidelines and products. Provides project planning support for project gating. Organizes and supports project management training.
• Provides expertise to the business and IT teams on IT controls improvements and implementation, assisting with the IT controls updates and re-design
• Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits
• Assists with policy and process changes to ensure the documents are up to date

Knowledge/Skills/Competencies

• Technical knowledge of specific areas of computer operations/applications support        
• Extensive knowledge of IT controls testing, monitoring, mitigation        
• Knowledge of the latest IT SoX requirements and controls structure        
• Knowledge of Celestica’s technology, business and IT strategies.        
• Proficient in IT Security         
• Advanced knowledge of risk mitigation and business controls        
• Advanced knowledge of data management and analytics         
• Advanced knowledge of delivering initiatives within the Operating Model        
• Advanced knowledge of project management        
• Proficient in architecture and solution integration          
• Advanced knowledge in business partnering         
• Knowledge of IT controls framework        
• Knowledge of IT audit structure/techniques        
• Excellent verbal and written communication skills.        
• Creative problem solving skills.         
• Knowledge of IT delivery/operations.         
• Excellent Project Management skills        
• Ability to work in a team environment.        
• Cross-functional coordination skills.        
• Change Management skills        
• Strong customer management skills         
• Ability to clearly articulate the role that IT can play in enhancing the customer’s activities    

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.
 

Typical Experience

Between 7 to 10 years of experience and obtaining the CISO certification.

Typical Education

• Bachelor['s degree in related field or consideration of an equivalent combination of education and experience.

• Educational Requirements may vary by Geography

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.