IT Risk & Compliance Analyst II

The next part of your journey is right around the corner — with The Standard.

A genuine desire to make a difference in the lives of others is the foundation for everything we do. With a customer-first mindset and an intentional focus on building strong teams across the nation, we’ve been able to uphold our legacy of financial stability while investing in new, innovative technologies that support the needs of our customers. Our high-performance culture focused on operational excellence thrives thanks to remarkable people united by compassion and a customer-first commitment. Are you ready to make a difference?

Job Summary

We are seeking a highly motivated and detail-oriented IT Risk and Compliance Analyst II to join our team within the Information Security department. Our team promotes a risk-aware culture and provides IT Risk governance, documented risk management processes, and leadership data-driven risk reporting. In this critical role, you will manage the IT Risk for the organization with respect to our 3 pillars: confidentiality, integrity, and availability. You will represent The Standard with regulators, auditors, and industry experts and be responsible for ensuring that IT Risk management processes are embedded in the enterprise, enabling optimal risk assessments returns. This role involves facilitating IT Risk governance, serving as an IT advocate for internal and external assessments and audits, and working on problems of diverse scope where analysis of data requires evaluation. Your compliance experience in Azure will be highly sought after.

Key Responsibilities:

• Provide consulting for IT Risk Management, Compliance & Metrics
• Monitor & report on IT Controls Compliance - monitor first line of defense.
• Facilitate Assessments and Audits – represent The Standard’s Info Sec Program for regulators and customers.
• Establish & maintain Primary Common Controls that align with business, regulatory and information security goals.
• Provide independent oversight of the risk management activities of the Service Owners.
• Perform independent validation to evaluate the adequacy and effectiveness of key controls.

Skills and Background You’ll Need

• EDUCATION: A High School Diploma or GED is required. A Bachelor's degree in Information Technology, Risk Management, or a related field is preferred. A CISA certification or CRISC certification are preferred.
• EXPERIENCE: Minimum of 3 years of experience in IT risk management and compliance.
• Strong understanding of IT risk governance principles and practices is required. Experience with cybersecurity regulation requirements and industry standards is required.
• Excellent analytical, problem-solving, and critical thinking skills. Strong communication and interpersonal skills, including the ability to translate IT subject matter to a non-IT audience. Project leadership experience is required.
• Experience with risk management tools (Archer, ServiceNow, etc.) is required.
• Compliance experience in Azure will be highly sought after.
• Experience with on prem and cloud platforms and knowledge of SOC 1, SOC 2, ISO 27001:2022, and HIPAA regulations are preferred.

 Key Behaviors of a Successful Candidate

• Adaptability - Quickly and resourcefully adapts to multiple changing work demands by adjusting team priorities to fit new circumstances. 
• Improvement Mindset - Recognizes opportunities for improvement between teams or functions; address problems and makes suggestions for ongoing improvement. 
• Customer Focus - Takes the extra step to anticipate customers’ needs and immediately takes action to resolve breaks in service or mistakes to satisfy customers. 

#LI-Remote

We have built an enduring legacy of stability, financial strength and exceptional customer service through the contributions of the service-oriented people who choose to work at The Standard. To ensure we can attract and retain the best talent, when you join The Standard you can expect:

• A rich benefits package including medical, dental, vision and a 401(k) plan with matching company contributions

• An annual incentive bonus plan

• Generous paid time off including 11 holidays, 2 wellness days, and 8 volunteer hours annually — PTO increases with tenure

• A supportive, responsive management approach and opportunities for career growth and advancement 

• Paid parental leave and adoption/surrogacy assistance

• An employee giving program that double matches your donations to eligible nonprofits and schools

In addition to the competitive salary range below, our employee-focused benefits support work-life balance. Learn more about working at The Standard.

• Eligibility to participate in an incentive program is subject to the rules governing the program and plan. Any award depends on a variety of factors including individual and organizational performance.

Salary Range:

Standard Insurance Company, The Standard Life Insurance Company of New York, Standard Retirement Services, Inc., StanCorp Equities, Inc. and StanCorp Investment Advisers, Inc., marketed as The Standard, are Affirmative Action/Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, national origin, gender identity, sexual orientation, age, disability, or veteran status or any other condition protected by federal, state or local law. The Standard offers a drug and alcohol free work environment where possession, manufacture, transfer, offer, use of or being impaired by an illegal substance while on Standard property, or in other cases which the company believes might affect operations, safety or reputation of the company is prohibited. The Standard requires a criminal background investigation, employment, education and licensing verification as a condition of employment. All employees of The Standard must be bondable.