at Stericycle, Inc. in DeerfieldBannockburn, Illinois, United States
Job Description
About Us:
Stericycle is a U.S. based business-to-business services company and leading provider of compliance-based solutions that protects people and brands, promotes health and well-being, and safeguards the environment. Since our founding over 30 years ago, we have grown from a small start-up in medical waste management into a leader across a range of increasingly complex and highly regulated arenas, serving healthcare organizations and commercial businesses of every size. Every day, we help our customers solve complex challenges by safely managing materials that could otherwise spread disease, contaminate the environment, or compromise one's identity.
Join us on our mission to protect health and well-being in a safe, responsible, and sustainable way.
Position Purpose:
The IT Risk & Compliance Analytics Analyst will be responsible for supporting the end-to-end execution of the centralized User Entitlement Review (UER) process using homegrown tools built in Outsystems and Alteryx. This position will report to the Manager, IT Risk & Compliance and work with multiple levels of management within the organization to ensure that user access in compliance with the access management policy. This role will support the identification the compliance gaps and assist in remediation.
Key Job Activities:
Execute the end-to-end centralized User Entitlement Reviews for organization, which includes the UER data preparation, ETL (Extract, Transform, Load) in UER data tools (Alteryx), monitoring of reviews while in process, perform post-access removal validation activities, and risk assessment of access removals for many applications across the organization.
Support the development, testing, and implementation of necessary UER tool updates to ensure completeness and accuracy of user access.
Assist in collaboration with cross-functional teams to gather and understand business requirements for implementing applications within UER tools, including understanding access provisioning processes and technical architecture for security across various applications.
Assist in applying analytical and critical thinking skills to identify potential risks, weaknesses, and compliance issues, and risk assessment processes in user access controls. Track and remediate access compliance issues in a timely manner. Proactively address issues that may result in the UER data being inaccurate.
Apply technical knowledge to assist in mapping and executing ETL processes in the user access review workflow.
Contribute to maintaining standard operating procedures, documentation of vocabulary and best practices to optimize the user access review process.
Participate in troubleshooting activities and data tracing to ensure data transformation integrity when questions arise.
Utilize data analysis techniques, including SQL queries, to assist in reviewing access data for accuracy and completeness.
Other: Occasional travel may be required for training and support functions. In the office 3 days a week, with ad-hoc flexibility as needed.
Experience (North America):
Bachelor's degree in Business Analytics, Information Systems, or a related field.
Basic understanding of auditing standards and their application to user access reviews.
2-3+ years of experience in a fast-paced professional role.
Previous audit, controls, process and/or IT audit is preferred, not required.
Licenses and Required Competencies
Strong ability to analyze business requirements and translate them into practical review strategies and quantitative analytics.
Detail-oriented mindset with an ability to spot patterns, anomalies, and potential risks.
Solid problem-solving and critical-thinking skills and demonstrates the ability to be a self-starter who can utilize their strong problem-solving skills to generate creative solutions to complex issues.
Strong ability in combining technical knowledge with business understanding.
Strong commitment to maintaining ethical standards and confidentiality.
Familiarity with troubleshooting activities and data tracing techniques.
Strong communication and written skills - Demonstrates the ability to present ideas and information in a clear, concise, organized, and diplomatic manner; listen to others to respond effectively to ideas and questions.
Deals openly and honestly with people in all levels of the organization while building credibility and maintaining trust. Exhibits empathy and sensitivity for the needs of others. Is perceived by others as being helpful and supportive.
Demonstrate the ability to deal with changing... For full info follow application link.
It is the policy of Stericycle, as an equal opportunity/affirmative action employer, to hire the best qualified people available without regard to race, creed, color, sex, sexual orientation, marital status, age, national origin or ancestry, religion, status with regard to public assistance, order of protection status, disability, or veteran status.
