IT Control & Compliance Analyst - Immediate

About HICV
At Holiday Inn Club Vacations, we believe in strengthening families. And we look for people who exhibit the courage, caring and creativity to help us become the most loved brand in family travel. We are committed to growing our people, memberships, resorts, and guest love. That is why we need individuals who are enthusiastic in life and bring those qualities to work every day. Do you instill confidence, trust, and respect in those around you? Do you encourage success and build relationships? If so, we are looking for you.

POSITION DESCRIPTION:
This position will be responsible for assist with managing the day-to-day assigned IT related Audit and SOX compliance functions. Responsible for creating and reporting on individual components of the SOX compliance controls, test programs and processes. Participates, supports, and partners with Internal Audit, IT Security, Access Management, Legal and other enterprise-wide stakeholders to understand, document, plan and deliver all IT SOX compliance requirements. Ensures compliance for the SOX Compliance controls and testing process to minimize risks for the organization.

This position will utilize IT auditing, audit support, and Internal Controls related skills to support IT and/or business-related IT controls and compliance objectives. Responsible for planning, coordination, collaborating with other cross-functional team members and providing required deliverables related to any IT audit and/or controls and compliance activities. Supports the annual policies and procedures, including Manuals and assess compliance. Follows and maintains standard operating procedures and escalates areas of opportunities to improve or streamline the process in alignment with compliance requirements.

Roles & Responsibilities:

• Responsible for planning, implementing, and executing all required quarterly (recertifications, etc.), semi-annual (password), and annual control testing for audit evidence (including systems and information source files). Reporting findings in a clear and concise manner along with escalating for deficiency.
• Create controls and compliance metrics for reporting. Make recommendations for enhancement and develop action plans for continuous improvements including automation for efficiency.
• Assist with represent as a subject matter expert for the IT controls and compliance related matters (procedures, processes, deliverables, and activity) to work with internal and external business partners for new projects, applications, etc. as needed. Responsible for pre-validation process to ensure completeness and accuracy (scope/objective, validate population in scope, other miscellaneous considerations)
• Assist with maintaining, reviewing, and updating policies and procedures to include IT controls and compliance objectives along with streamline processes.

This job description in no way states or implies that these are the only duties to be performed by the employee in this position. It is not intended to give all details or a step-by-step account of the way each procedure or task is performed. The incumbent is expected to perform other duties necessary for the effective operation of the department.

EDUCATION and QUALIFICATIONS

• A bachelors degree in business administration or related field Computer Science, Information Systems, or other IT-related area
• 5+years of working in a regulatory environment or setting (SOX, ISO 27001)
• Proficient in Microsoft Office
• Course work or completion toward CISA certification
• Relevant Professional Certifications or currently pursuing is a plus not required
• Must have excellent logical, analytical, and critical thinking skills
• Must be an adaptive learner and initiative-taker along with ability to take initiative, dependable, and able to work with little supervision while being resilient to change in a fast-paces environment
• Must have excellent verbal and strong documentation/written communication skills
• Experience working in a collaborative team environment
• Willing to escalate and communicate issues of non-compliance