Compliance Analyst (Banking), Sr. jobs in Reading, PA

Position Summary:

The Associate IT Compliance Analyst is an entry level position to the Audit Compliance Team. This role will learn the Penske audit compliance responsibilities, including security control management, change control management and audits, and contractor time and rate management for capitalized projects. This position will also maintain contract documentation for the Penske IT organization. In addition, internal quarterly access reviews will be performed, monitored, and documented. The Audit Compliance Team is growing and redesigning our current processes to be more effective and efficient, through procedure changes and new software platforms. This is an excellent time to be joining the team to learn these new capabilities.

Penske Responsibilities:

• Complete assignments effectively to ensure that the objectives are achieved with quality results

• Develop internal customer relationships with IT associates, process owners, and management

• May be involved in scheduling, and leading/participating in meetings over the phone or in person

• Expected to communicate with vendors, management either verbally or by email

• Deliver projects and assignments in scope, on time, with quality results that meet or exceed the customer expectations

• Perform basic problem and data analysis to help analyze responses

• Understand and demonstrate the importance of compliance to the organization’s success

• Cooperate with others and work as a team when applicable

• Ability to set priorities for self

• Involved in identification and escalation of security/IT risk issues

• Recommend process changes and controls based on analysis results to improve daily functions of IT Compliance

IT Audit Administration

• Maintain contracts in the Penske enterprise contract management system and develop leadership workflows for renewals

• Understand financials for contractor time being booked against capitalized projects

• Run and maintain the authority on demand reporting for the CIO

• Work with security controls and procedures

• Work with change control management and change control audits

• Manage contractor time and rate management for capitalized projects

• Maintain IT contract documentation within an enterprise wide system

• Participate in IT Audit Remediation meetings with Senior Management on a monthly basis.

Quarterly Access Reviews

• Process all scheduled quarterly access reviews using the identity management system, working with process owners as well as the security administration team to ensure all reviews are done in a timely basis, all changes are processed, and all activity is documented in a secure repository.

PCI, NIST, and ITGC Compliance

• Attend meetings for the process control remediation for PCI, NIST, and ITGC standards.

• Assist with any remediation that needs to be performed within the Audit Compliance Team.

• Management notification is required for adequate communication and task assignments.

IT Policies & Procedures

• Manage and maintain the Written Information Security Program document to ensure all areas are complete and up to date, including new items and controls as they become available.

• Perform annual reviews with all process owners and update the document accordingly.

Security Assessments

• Assist with the facilitation of security assessments with third party suppliers annually, providing analysis results and report on discrepancies to security analyst

• Maintain storage of security assessments in a repository

Penske Qualifications:

• Bachelor's Degree preferred. If no degree, equivalent work experience is required

• CISA preferred, not required

• 2 years minimum functional experience preferred

• Knowledge of Sarbanes-Oxley and any other compliance initiatives, including PCI, FSA, HR/Benefits, SSAE18 preferred

• Knowledge of industry standards and regulatory requirements for security such as ISO27001, COBIT 5, and NIST preferred

• High level knowledge of basic security controls a plus

• Ability to use Microsoft product suite required

• Adhere to defined IT Audit project methodology

• Understanding of quality tools (Six Sigma, LEAN, CAP, etc)

• Understanding of IT process and compliance controls currently in use at PTL and PL

Physical Requirements:

• The physical and mental demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• The associate will be required to: read; communicate verbally and/or in written form; remember and analyze certain information; and remember and understand certain instructions or guidelines.

• While performing the duties of this job, the associate may be required to stand, walk, and sit. The associate is frequently required to use hands to touch, handle, and feel, and to reach with hands and arms. The associate must be able to occasionally lift and/or move up to 25lbs/12kg.

• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and the ability to adjust focus.

Penske is an Equal Opportunity Employer.

Job Family: Information Technology

Address: 100 Gundy Drive

Primary Location: US-PA-Reading

Employer: Penske Truck Leasing Co., L.P.

Req ID: 2330107