IT Controls and Compliance Analyst

Company Description

Zayo provides mission-critical bandwidth to the world's most impactful companies, fueling the innovations that are transforming our society. Zayo's 141,000-mile network in North America and Europe includes extensive metro connectivity to thousands of buildings and data centers. Zayo's communications infrastructure solutions include dark fiber, private data networks, wavelengths, Ethernet, and dedicated Internet access. Zayo serves wireless and wireline carriers, media, tech, content, finance, healthcare and other large enterprises.

At Zayo our premise for success lies in our strong foundations of policies and regulations that comply with the highest of ethos. We're seeking a seasoned IT Controls and Compliance Analyst to help us uphold our company-wide policies, in the most efficient and effective approach. The IT Controls and Compliance Analyst role requires the candidate to be proficient in the developing and transitional compliance laws of the country. Working as a compliance lead, the candidate in question must take charge of curating policies and strategies and effectively transfer this knowledge to the employees. The IT Controls and Compliance Analyst job involves high proficiency in some soft skills such as communication, organizational abilities, and strong interpersonal skills, as it involves liaising with different stakeholders, internally and externally.

Within IT Control and Compliance, we evaluate and communicate technology risk, provide solutions to mitigate those risks, and support the achievement of strategic and operational objectives via risk management oversight and reporting. We are committed to building a better, more effective, and more efficient IT organization by encouraging stakeholders to take and benefit from risk analysis, sustain growth/performance, and obtain greater access to risk insights and metrics.

• We transform controls to standardize and simplify frameworks across the organization.

• We define processes and procedures to enable regulatory compliance.

• We assess, define and align data integrity and application security to the risk and controlsframework.

• We enable technologies to effectively execute and sustain risk-managed solutions.

Responsibilities:

• Help the organization identify data integrity risks within Zayo's environment, design frameworks to manage them, and improve the effectiveness and efficiency of the IT Controls and Compliance function.

• As a risk transformation professional, you will be addressing key issues such as business performance variability, business and process controls transformation, application security and governance, digital technology enablement, continuous monitoring, and IT risk management.

• Work directly with the key IT and business stakeholders to ensure that solutions satisfy business needs, proper requirements are established, and solutions are created (via external development) and implemented successfully.

• Stay with the project from inception to delivery, while guiding teams of Project Managers, Business Analysts, and Developers via matrix relationships.

• Understand the SOX process flows, narratives, risk and control matrices of business processes, and information technology platforms relevant to financial reporting

• Conduct or participate in walkthroughs and other meetings with process and control owners to ensure SOX testing plans are properly created to address financial reporting risks identified by management.

• Support IT risk assessment processes, identifying potential compliance risks.

• Participate in the development of testing plans over key controls, reports, and spreadsheets.

• Manage certain internal and external audit assignments as appropriate and necessary.

• Evaluate the operational effectiveness of entity-level controls, business process key controls, and ITGCs in accordance with ICFR testing guidance.

• Assist in the oversight and management of SOX compliance within the IT department.

• Help in reviewing and updating IT policies to align with SOX requirements.

• Assist in the monitoring of IT changes impacting critical systems, ensuring compliance with the IT Significant Change Management Policy.

• Help maintain documentation and evidence for SOX controls. Support the creation of compliance reports.

• Support the monitoring of third-party SaaS providers and IT service providers for compliance.

• Provide technical leadership in the assessment, design, and implementation of data integrity requirements within IT Zayo's systems landscape.

• Ensure quality, consistency, and operability of new and existing controls.

• Lead review of IT tools that enable successful control design and operation.

• Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment.

• Manage multiple concurrent projects with quality and in accordance with a documented schedule that meets or exceeds customer expectations.

• Review test findings and facilitate the remediation of control gaps, and escalate possible critical issues to senior management within IT and business.

• Ensure that SOX and operational documentation is kept up-to-date and accurate.

• Foster an innovative and inclusive team-oriented environment.

• Play an active role in counseling and mentoring of team members and stakeholders.

• Participate in conducting training sessions on SOX compliance and related IT areas

• Perform other duties as assigned by supervisor.

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a related field; advanced degree or relevant certifications.

• Experience or strong interest in IT compliance, audit, or similar role.

• Knowledge of SOX compliance, ITGCs, and risk management principles.

• Proactive, strategic approach to problem solving and controls execution.

• Knowledge of current technological trends and developments.

• Strong analytical, interpersonal, and communication skills.

• Demonstrated ability to lead a diverse set of internal and external stakeholders, including senior leaders, business and functional representatives, and vendors / consulting partners.

• Ability to identify project-impacting issues and work with various IT and business stakeholders to develop and implement solutions.

• Excellent communication and interpersonal skills, with the ability to collaborate with cross-functional teams and influence stakeholders.

• Strong work ethic and team player.

• High degree of professionalism.

Estimated Base Salary Range: $78,500 - $112,100 USD/annually.

The base pay range shown is a guideline and reasonable estimate for this role. It takes into account the wide variety of factors that are considered in making compensation decisions. Actual compensation offered may vary from the posted range based upon geographic location, work experience, skill level, certifications, and other business and organizational needs. Non- sales roles may be eligible to participate in a discretionary annual incentive plan. Sales roles may be eligible to participate in a sales incentive plan.

Additionally, this position may be eligible for certain benefits, such as health insurance, life insurance, disability retirement plans, paid time off.

The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.

Benefits, Rewards & Wellness

• Excellent Health, Dental & Vision Insurance

• Retirement 401(k) Savings Plan

• Generous paid time off policy including paid parental leave

Zayo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, provincial or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.