IT Risk Analyst

The SouthState story is one of steady growth, deep community roots, and an unwavering commitment to helping our customers move forward. Since our beginnings in the 1930s to becoming a trusted financial partner across the South and beyond - we are known for combining personal relationships with forward-thinking solutions.

We are committed to helping our team members find their success while maintaining the integrity of our values: building trust, fostering lasting relationships and pursuing excellence. At SouthState, individual contributions are recognized, potential is cultivated and team members are inspired to achieve their greater purpose. Your future begins here!

SUMMARY/OBJECTIVES

Under the direction of the IT Risk and Regulatory Manager, manage first line of defense activities within the IT Business unit for risk management activities. Serve as support for compliance, risk identification, measurement, and mitigation programs, and promote overall risk ownership and awareness as it relates to the Technology environment.  Collect, analyze, and present various data in order to support Technology and the business to track performance, identify trends, determine courses of action, and make decisions.  This position would report to the IT Risk and Regulatory Manager, and support the following:

ESSENTIAL FUNCTIONS

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This position would serve to take a proactive approach to risk management, to include: 

• Assist in the remediation of any current or future audit or regulatory findings to ensure a complete and sustainable solution to prevent future and repeat findings.

• Survey IT processes and systems to identify risks associated with them and perform risk assessments to determine effectiveness of current controls/identify needed controls.

• Work alongside IT managers when implementing new services or new products to ensure risk is adequately addressed, as well as act as risk support on updates to current systems/processes.

• Develop relationships with Risk and Compliance partners in order to collaborate on effective risk management practices and initiatives.

• Maintain risk reporting to include tracking of audit/regulatory findings, outstanding compliance issues and requirements, risk assessment mitigations, etc. to ensure timely and comprehensive responses.  As part of this reporting, a full set of Key Risk Indicators should be defined with resulting action plans.

• Act as project manager for risk programs which would result in minimizing risk to IT (ex. Risk assessments).

• Facilitate cross departmental meetings effectively with prepared agendas and clear next steps to move toward implementation or completion of project or initiative.

• Review and document gap analysis of FFIEC, ISO and other regulatory guidance on IT risk practices and controls.  Stay abreast of industry trends and changing regulations.

• Work with business stakeholders and other subject matter experts to assess current documentation, understand high-level business processes and apply technical background/understanding in the development of policies, procedures, workflows, and other documentation.

• Continuously enhance knowledge/expertise in own area and keep current with trends/development and regulatory changes which may affect technology risk within the bank. 

• Develop awareness of South State Bank Technology services, applications, infrastructure, analytical tools, and techniques which can contribute to better analysis.

• Accepts other duties as assigned.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

COMPETENCIES:

• Detail oriented with ability to communicate with diverse stakeholders 

• Accuracy

• Initiative

• Ability to organize data, summarize, and identify actions

• Ability to multi-task and prioritize; ability to work in a dynamic environment 

• Strong communication/presentation, critical thinking, and influencing skills

Qualifications, Education, and Certification Requirements

• Education: Bachelors or higher degree required

• Job Requirements:

  • 5 years in a risk related position

  • At least 3 years in IT field (preferred)  

• Certifications/Specific Knowledge: 

  • Familiarity with governmental guidance or regulations

  • Skilled in Microsoft Excel and PowerPoint

  • Project management experience strongly recommended

TRAINING REQUIREMENTS/CLASSES:

• New employee orientation

• Required annual compliance training

• On-going risk training, & cross-departmental training

PHYSICAL DEMANDS / WORK ENVIRONMENT

Must be able to stand and/or sit for long periods of time. Must be able to effectively access and interpret information on computer screens, documents, and reports.

WORK ENVIRONMENT

Telecommuting roles no matter if hybrid or 100% full time telecommuting must have a secure home office environment that is free from background noise and distractions. They must also have a reliable private internet connection that is not supplied by use of cellular data (hot spot). Cable or fiber connections are preferred.  Requirements are subject to change, as new systems and technology is delivered. Travel may be required to come to meetings as needed.

Equal Opportunity Employer, including disabled/veterans.