The Area: The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure. The Role: The Information Security Team is looking for an IT Risk and Compliance Analysis to join the IT Compliance Team. The IT Risk and Compliance Analyst will assist in supporting Morningstar’s compliance related responsibilities. This individual will help document security processes and procedures, ensure current and future compliance obligations are met, assist in identifying and following up on information security findings, gather evidence required for internal and external audits, conduct 3rd party vendor risk assessments, and respond to customer RFPs and due diligence questionnaires.  Job Responsibilities<ul><li>Assist in supporting Morningstar’s current and future compliance related responsibilities (SOX, SOC2, PCI-DSS, SEC, etc.)</li><li>Monitor and enforce compliance to information security and compliance policies and standards</li><li>Conduct 3rd party vendor risk assessments</li><li>Assist with documenting and regularly reviewing security policies, processes and procedures</li><li>Respond to customer RFPs and due diligence questionnaires</li><li>Gather evidence required for internal and external audits</li><li>Liaise with third party audit personnel as required</li></ul>Qualifications<ul><li>A bachelor’s degree and 2+ years’ experience in a risk and compliance or I.T. auditor role</li><li>Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR etc.)</li><li>Familiarity with IT audits and risk assessments</li><li>Familiarity with security frameworks (ISO 27001, NIST, etc.) and general security concepts</li><li>Strong organizational skills and the ability to multitask and switch priorities with short notice</li><li>Strong business analysis, research and analytical skills</li><li>Excellent communication skills</li><li>Experience in reviewing SOC 2 reports</li><li>Availability to work off business hours as required</li></ul>Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We’ve found that we’re at our best when we’re purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.315_Sustainalytics SRL Legal Entity

Morningstar Sustainalytics is a leading independent ESG and corporate governance research, ratings and analytics firm that supports investors around the world with the development and implementation of responsible investment strategies. For 30 years, the firm has been at the forefront of developing high-quality, innovative solutions to meet the evolving needs of global investors. Today, Sustainalytics works with hundreds of the world&rsquo;s leading asset managers and pension funds who incorporate ESG and corporate governance information and assessments into their investment processes. Sustainalytics also works with hundreds of companies and their financial intermediaries to help them consider sustainability in policies, practices and capital projects. With 17 offices globally, Sustainalytics has more than 1,200 staff members, including more than 500 analysts with varied multidisciplinary expertise across more than 40 industry groups. For more information, visit www.sustainalytics.com.

IT Compliance Analyst

About the Job

About the Company

Sustainalytics

Similar Jobs

IT Risk Specialist

IT Risk Specialist

Senior Security Analyst

Senior Security Analyst

(Senior) Analyst Compliance – Due Diligence & Screening (m/f/d)

(Senior) Analyst Compliance – Due Diligence & Screening (m/f/d)

Auditor, ISO (Integrated Management Systems)

Auditor, ISO (Integrated Management Systems)

(Senior) Analyst Compliance – Due Diligence & Screening (m/f/d)

(Senior) Analyst Compliance – Due Diligence & Screening (m/f/d)

Compliance & Reporting Manager

Compliance & Reporting Manager

Information Security Compliance Lead

Information Security Compliance Lead

Data Associate

Data Associate

IT Operations and Security Manager (Fixed-Term Contract)

IT Operations and Security Manager (Fixed-Term Contract)

Lead Analyst - IT Governance Compliance

Lead Analyst - IT Governance Compliance