Sr. Compliance Analyst

The Opportunity

Senior GRC Technology Analyst will have the opportunity to impact meaningfully and contribute to the OpenText IT Compliance Program in accordance with ISO 27001, PCI-DSS, SOC1/2, HIPAA, SOC2+HITRUST and FedRAMP. The Senior GRC Technology Analyst key individual contributor role in the continued development and maturity of an ever-growing Security Compliance Program that supports the delivery of compliance certifications to support customer security requirements. This role will operate in OpenText’s second line of defense within the overall IT control environment. In this role, you will support our enablement and optimization of various compliance programs through automation in our GRC tools.

You Are Great At

• Hands on building GRC solutions and other compliance tools.
• Passionate about people, processes and technology that enable us to achieve our compliance certifications.
• Drive control automation and support process improvement in the delivery of OpenText’s Compliance portfolio.
• Contributing to the ongoing strategy of enablement of technology through business intelligence, automation to support the compliance and control environment.
• Contribute to process of continuous improvement through effective tools and organizational change management.
• Collaborating cross-functionally within our technology, compliance, and business stakeholders to identify requirements to drive automation and supporting process improvements in the compliance portfolio.
• Participate in an effective centralized control data management process.
• Facilitate design sessions to identify detailed system requirements.
• Working knowledge of security controls, audit lifecycle and the roles of key stakeholders in a Security Compliance Program.

What It Takes

• 2 years of experience in IT audit and/or compliance, with some background in GRC tools.
• Understanding of data analytics with tools such as Microsoft PowerBi.
• Good technical, analytical, interpersonal, communication and writing skills.
• A background of evaluating the design and effectiveness of controls and experience working with auditors/regulators for compliance assessments.
• Ability to work both independently and within a global team environment.
• Strong project management experience.
• The ability to operate in a dynamic environment and handle numerous concurrent projects with a sense of urgency and ownership.
• Demonstrated strength in working in a constantly changing environment.
• Strong personal characteristics as demonstrated by the following:  Owner’s mindset, achievement-oriented, self-controlled, self-confident, flexible, approachable, and dedicated.
• General working knowledge of industry compliance frameworks (SOC 2, ISO 27001, PCI DSS, HIPAA/HITRUST, FEDRAMP, etc.) for assigned cloud.
• Experience with working in the cloud and GCP, AWS, Azure is a plus.
• Bachelor’s Degree in Information Technology, Business, or related vocations.