Sr. Information Security Analyst

Apr 13, 2023
Hyderabad, Pakistan
... Not specified
... Senior
Full time
... Office work

WHAT YOU DO AT AMD CHANGES EVERYTHING

 

We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives. This is who we are at our best. One Company. One Team. 

 

AMD together we advance_

Job Description:

The IT Compliance Analyst supports the Cyber Risk Management Lead with third party risk assessment, coordination, and management of regulatory controls as they relate to Sarbanes-Oxley (SOX) and internal IT processes. He/she will be responsible for supporting timely automated control execution notifications, verifying that controls are being executed timely with appropriate evidence retention, supporting the management of policy and process documents, supporting the management of the IT exceptions, performing IT control assessments, performing IT risk assessments, and making recommendations on possible improvements/efficiencies. He/she will help support ITGC SOX audit work being executed by internal and external audit agencies as needed.


Responsibilities:
In addition to following AMD’s policies and processes, responsibilities include, but are not limited to:

 

  • Working with IT and other stakeholders, support the maintenance of the policy and process documents.
  • Working with the appropriate cross-organizational resources, ensure that the documentation of IT exceptions is complete, appropriate approvals are captured timely, and follow-up on exceptions as they expire.
  • Monitor the timely execution of automated control execution notifications and verifying if controls are being executed timely with appropriate evidence being retained.
  • Maintain IT SOX documentation (i.e. RCMs, Narratives, etc.)
  • Support internal and external auditors with SOX audits in the planning phases, providing requested evidence, setting up time with IT control contacts, and being a liaison to IT for follow-up questions.
  • Perform IT control assessments and risk assessments.
  • Support third party risk assessments.
  • Help maintain a strong control environment in IT Department
  • Monitor and facilitate the implementation of control remediation efforts, SOX related corrective action requests, and control improvements.
  • Facilitate the new hire IT policy and process training.
  • Provide technical expertise in the areas of internal controls.

 


Basic Qualifications and Skills:

- Have a B.A./B.S in a related field

- Have at least 5 (five) years of experience in IT, with 3+ years of this experience being in IT Compliance / IT Audit
- Be knowledgeable in the area of IT
- Be knowledgeable of SOX compliance and IT General Ccontrols controls
- Have knowledge of CoBit and COSO
- Be able to handle confidential information in a professional manner
- Have the ability to recognize and communicate potential control related issues in a timely manner
- Strong communication skills (both written and verbal)

- Possess strong interpersonal skills and the ability to adapt information based on the audience

- Strong team player
- Be able to work effectively with colleagues and management
- Be highly organized and self-reliant, with the ability to multi-task
- Have excellent process and time management skills

- Able to appropriately identify issues and raise them to IT Compliance management.
- Be objective-oriented while paying close attention to detail
- Have the ability to listen effectively and communicate with honesty
- Be able to acquire and evaluate data
- Have knowledge of and the ability to use a PC as well as Microsoft Office Suite, Visio, and SharePoint software

Desired Qualifications and Skills: - Be CISA certified

#LI-NF1

Benefits offered are described:  AMD benefits at a glance.

 

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law.   We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

Benefits offered are described:  AMD benefits at a glance.

 

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law.   We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

Job Description:

The IT Compliance Analyst supports the Cyber Risk Management Lead with third party risk assessment, coordination, and management of regulatory controls as they relate to Sarbanes-Oxley (SOX) and internal IT processes. He/she will be responsible for supporting timely automated control execution notifications, verifying that controls are being executed timely with appropriate evidence retention, supporting the management of policy and process documents, supporting the management of the IT exceptions, performing IT control assessments, performing IT risk assessments, and making recommendations on possible improvements/efficiencies. He/she will help support ITGC SOX audit work being executed by internal and external audit agencies as needed.


Responsibilities:
In addition to following AMD’s policies and processes, responsibilities include, but are not limited to:

 

  • Working with IT and other stakeholders, support the maintenance of the policy and process documents.
  • Working with the appropriate cross-organizational resources, ensure that the documentation of IT exceptions is complete, appropriate approvals are captured timely, and follow-up on exceptions as they expire.
  • Monitor the timely execution of automated control execution notifications and verifying if controls are being executed timely with appropriate evidence being retained.
  • Maintain IT SOX documentation (i.e. RCMs, Narratives, etc.)
  • Support internal and external auditors with SOX audits in the planning phases, providing requested evidence, setting up time with IT control contacts, and being a liaison to IT for follow-up questions.
  • Perform IT control assessments and risk assessments.
  • Support third party risk assessments.
  • Help maintain a strong control environment in IT Department
  • Monitor and facilitate the implementation of control remediation efforts, SOX related corrective action requests, and control improvements.
  • Facilitate the new hire IT policy and process training.
  • Provide technical expertise in the areas of internal controls.

 


Basic Qualifications and Skills:

- Have a B.A./B.S in a related field

- Have at least 5 (five) years of experience in IT, with 3+ years of this experience being in IT Compliance / IT Audit
- Be knowledgeable in the area of IT
- Be knowledgeable of SOX compliance and IT General Ccontrols controls
- Have knowledge of CoBit and COSO
- Be able to handle confidential information in a professional manner
- Have the ability to recognize and communicate potential control related issues in a timely manner
- Strong communication skills (both written and verbal)

- Possess strong interpersonal skills and the ability to adapt information based on the audience

- Strong team player
- Be able to work effectively with colleagues and management
- Be highly organized and self-reliant, with the ability to multi-task
- Have excellent process and time management skills

- Able to appropriately identify issues and raise them to IT Compliance management.
- Be objective-oriented while paying close attention to detail
- Have the ability to listen effectively and communicate with honesty
- Be able to acquire and evaluate data
- Have knowledge of and the ability to use a PC as well as Microsoft Office Suite, Visio, and SharePoint software

Desired Qualifications and Skills: - Be CISA certified

#LI-NF1

COMPANY JOBS
1545 available jobs
WEBSITE