Job Description
Job Description Summary Global Technology Services (GTS) partners with the Aegon businesses to provide global IT standards and governance, global IT procurement services, and IT infrastructure, application, and cloud support services. The GTS Internal Controls and Compliance (ICC) team provides governance, risk management, internal controls, and compliance services to GTS to support and enable GTS leadership in achieving strategic objectives. This is accomplished through: •Development and implementation of comprehensive IT control policies •Execution of risk assessments and analysis of operational and information security risks •Management of internal and external compliance requirements •Performance of control assessments on IT assets in support internal and external controls testing requirements The GTS ICC team enables and supports effective IT Risk Management within GTS through risk identification, assessment of identified risks and providing regular monitoring and oversight of a comprehensive risk profile. At Aegon, effective risk management and control is achieved through implementation of sets of controls, selected through prescribed risk management processes and managed using the IT risk management and control policies, processes, procedures, organizational structure, and hardware to protect the identified information assets. Intermediate Risk and Compliance Analyst – Governance, Risk & Compliance This Intermediate Risk and Compliance Analyst - Governance, Risk, & Compliance (GRC) position conducts independent comprehensive assessments of the management, operational, and technical controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls. To ensure that control objectives are being met and we can provide reasonable level of assurance to all key stakeholders. This position is focused on global delivery providing centralized services and supporting global program build-out.
Job Description Key Responsibilities:
On a day-to-day basis, this position will perform responsibilities such as some or all the following:
- Review implementation of control requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization's mission and goals.
- Assist in the determination of gaps in design or controls exist and providing recommendations for remediation and implementation of mitigating controls.
- Identify control requirements specific to an information technology (IT) system in all phases of the system life cycle.
- Collaborate with first line in development of action plans to assess the adequacy of action taken by management to remediate open items
- Support compliance/audit activities as assigned in relation to Sarbanes Oxley (SOX), IT Control Framework, Service Operation Control audits, manage internal/external audit engagements and third-party business reviews
- Support control assessments first time and ongoing (Process, Application, and Infrastructure)
- Participate in the policy standards implementation strategies to ensure procedures and guidelines comply with applicable control policy.
- Assist in the development and implementation of goals, policies, priorities, procedures relating to internal controls
- Support audit findings and recommendations to ensure that appropriate mitigation actions are taken.
- Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
- Assess, define, and execute on control optimization
- Support the verification that all acquisitions, procurements, and outsourcing efforts address control requirements consistent with organization goals and objectives
- Support the key stakeholders throughout Aegon on IT control framework and control consultant
- Engage and collaborate with second line to demonstrate the design and operating effectiveness of controls
- Support Cloud AWS (Amazon Web Service), Microsoft Azure control implementation, monitoring and reporting.
Qualifications and Skills:
- Bachelor’s degree or equivalent knowledge in risk management and controls.
- 3 plus years of experience working with internal controls, audit, or risk management within the financial services industry.
- Excellent communication skills in writing and communication information in a clear, concise manner.
- Proven analytical, critical thinking and problem-solving skills
Preferred Qualifications:
- CISA, CISSP, CISM, or CIA recommended.
- Ability to understand technology, management, and leadership issues related to organization processes and problem solving.
- Knowledge of Audit Assurance Framework requirements.
- Financial services experience
- Experience with GRC solutions
- Knowledge of public cloud providers (AWS, Azure, etc.)
- Big 4 public accounting experience working with controls within the Sarbanes Oxley environment.
- Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.
- Skill in creating policies that reflect control requirements.
Our Culture:
- At Aegon we promote a Future Fit mindset. What is a Future Fit mindset?
- Acting as One fosters an environment of positive collaboration
- Accountability allows us to own the problem as well as the solution
- Agility inspires new ideas, innovation and challenges the status quo
- Customer Centricity encourages an above average and beyond approach to our customers
Working Conditions:
- Hybrid employees will need to work at a Company office location at times and a remote work location (typically their home) at times.
- Global support may require some non-traditional hours for meetings
**Please note that the compensation information that follows is a good faith estimate for this position only and is provided pursuant to the Colorado Equal Pay for Equal Work Act and Equal Pay Transparency Rules. It is estimated based on what a successful Colorado applicant might be paid. It assumes that the successful candidate will be in Colorado or perform the position from Colorado. Similar positions located outside of Colorado will not necessarily receive the same compensation. **
Compensation:
The salary for this position generally ranges between $56,000-$85,000 . This range is an estimate, based on potential employee qualifications, operational needs and other considerations permitted by law. The range may vary above and below the stated amounts, as permitted by Colorado Equal Pay Transparency Rule 4.1.2.
Bonus Eligibility:
This position is also typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at Company Discretion at a rate of 10% .
Working Environment:
- Hybrid employees will need to work at a Company office location at times and a remote work location (typically their home) at times.
What You Receive:
A Comprehensive Wealth + Health package. It’s our passion to empower people, and especially our employees, to add years to their lives and more life to their years. That means a healthy account balance and a healthy body to match. As you’ll come to discover, Wealth + Health is a central part of everything we do!
Wealth Benefits; Competitive Pay, Bonus, and Benefits Package; Pension Plan, 401k Match, Employee Stock Purchase Plan, Tuition Reimbursement, Disability Insurance, Stock Purchase Plan, Employee Discounts, Career Training & Development Opportunities, Certification Sponsorship
Health and Work/Life Balance Benefits; Be Well Company sponsored holistic wellness program which includes Wellness Coaching and reward dollars, Parental Leave, Adoption Assistance, Employee Assistance Program, College Coach Program, Back-up Care Program, Paid Time Off to Volunteer, Employee Matching Gifts Program, Employee Resource Groups, Inclusion and Diversity Programs, Employee Recognition Program
Our commitment to inclusion & diversity means that we value differences. We encourage the unique perspectives of individuals and are dedicated to creating a respectful and inclusive work environment.