The IT Senior Compliance Analyst reports directly to the IT Compliance Director is responsible for a combination of driving the efforts as well as being hands-on in completing multiple IT risk assessment efforts. This individual will be part of a highly visible team that will involve designing, leading, and completing the efforts in responding to clients, auditors, and external parties. The ideal candidate will have previous strong IT controls assurance experience combined with strong skills in designing effective IT controls for a large global company with disparate systems.

Please note: preferred location of incumbent is Eastern Standard Time (EST) zone or Central Standard Time (CST).

Reviews, executes, and deliver work products submitted to clients, auditors, and external parties
• Coordinates and responds to clients, auditors, and external parties regarding the IT control environment
• Performs evaluation of IT risks, mitigating controls, residual risks and impact to the Company. Reviews and maintains matrix of identified IT risks.
• Confirms IT risks identified by clients, auditors, and external parties. Identifies the root cause and potential remediation activities.
• Maintains and assists with designing a solution for streamline efforts responding to clients, auditors, and external parties
• Directs, reviews, and executes efforts for monitoring of compliance against security policies, remediation efforts, and other compliance requirements, as applicable
• Supervises and develops lesser experienced ICT compliance team members.
• Acts as risk management liaison with all levels of the IT organization, all lines of business, and other internal departments and organizations. Provides information risk and controls consulting and advisory services to individuals, leaders, project teams, and vendors.
• Upholds the Crawford Code of Conduct

#LI-SM

• Bachelor's degree in information systems, computer science, or related field.
• 2+ years of hands-on experience performing IT control assurance reviews
• 1+ years supervising a team
• Ability to work with complex, cross-functional teams in a highly matrixed environment.
• Ability to evaluate and clearly document the IT risks and impacts to all levels of the organization.
• Experience performing IT control reviews in security domains including IT asset security, security engineering, network security, identity and access management, security assessment and testing, security operations, and secure development.
• Knowledge of a broad range of security technologies including NextGen Firewalls, DLP, NAC, IDS/IPS, Certificate Management, Identity & Access Management, Privileged Identity
• Management, Multi-Factor Authentication, Mobile Device Management, Endpoint protection, SIEM, Anti-malware, Vulnerability Management, etc.
• Experience with regulations, policy, standards, procedures or other requirements which requires IT compliance (e.g. ITIL, SOX, SSAE-16, HIPAA, NIST 800-53, NIST CSF, PCI-DSS, Data Privacy).

Preferred:

• CISA, CISM, CISSP or other relevant security-certification(s) (Preferred)
• Experience performing IT control assessments over Mainframe, UNIX, Windows, SQL Server, Oracle DB, or a major ERP application (e.g. PeopleSoft or Lawson).
• Experience working with SharePoint.
• 1+ years responding to client requests
• 1+ years of consulting experience in remediating or implementing IT controls

Because a claim is more than a number - it's a person, a child, a friend. It's anyone who looks to Crawford on their worst days. And by helping to restore their lives, we are helping to restore our community - one claim at a time.

At Crawford, employees are empowered to grow, emboldened to act and inspired to innovate. Our industry-leading team pioneers new solutions for the industries and customers we serve. We're looking for the next generation of leaders to take this journey with us.

We hail from more than 70 countries and speak dozens of languages, reflecting the global fabric of the audience we serve. Though our reach is vast, we proudly operate as One Crawford: united in purpose, vision and values. Learn more at www.crawco.com.

When you accept a job with Crawford, you become a part of the One Crawford family.

• Our total compensation plans provide each of our employees with far more than just a great salary
• Pay and incentive plans that recognize performance excellence
• Benefit programs that empower financial, physical, and mental wellness
• Training programs that promote continuous learning and career progression while enhancing job performance
• Sustainability programs that give back to the communities in which we live and work
• A culture of respect, collaboration, entrepreneurial spirit and inclusion

Crawford & Company participates in E-Verify and is an Equal Opportunity Employer. M/F/D/V Crawford & Company is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at Crawford via-email, the Internet or in any form and/or method without a valid written Statement of Work in place for this position from Crawford HR/Recruitment will be deemed the sole property of Crawford. No fee will be paid in the event the candidate is hired by Crawford as a result of the referral or through other means.

#LI-IP1