Information Risk and Compliance Analyst
Summary:
As part of the KAR Office of the CISO Information Risk and Compliance Team, this position is responsible for managing and administering a variety of matters concerning information risk and compliance for KAR Global and its Business Units.
This position is part of a team that is responsible for ensuring that all KAR Business Units around the globe maintain compliance with customer contractual and regulatory requirements, including Sarbanes-Oxley (SOX), SSAE18 SOC1/SOC2, PCI, GDPR, numerous State, Federal, and Country laws, as well as internal KAR Global policies and standards. This position will interact with members from all areas of the company to facilitate the collection and organization of audit evidence under the direction of the Information Risk and Compliance Director.
Key Job Functions: • Collect compliance and evidentiary artifacts and review for accuracy and completeness.• Coordinate responses to customer Requests for Information (RFI) and other inquiries. • Support remediation activities from audit findings and compliance related issues.• Participate in or lead customer audits, departmental projects and other activities as needed.
In addition to the above key responsibilities, this position is expected to:• Maintain quality of service by following and enforcing organization policies and standards.• Maintain professional and technical knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; maintaining awareness of industry leading practices; participating in professional societies.• Be familiar with the use of Microsoft Office productivity tools.• Practice and promote teamwork.
Educational Requirements & Qualifications:• Ability to work with minimal direct supervision.• Ability to communicate clearly and concisely.• Ability to work with all levels of IT and Business Unit operations to promote and educate regarding corporate policies and procedures.• Bachelor's Degree in related field or equivalent related experience preferred.• 1-3 years of related Compliance and/or Information Security administration experience preferred.
#techjobs