field_job_occupational_field_parents_all

job_organization_name

Join TriumphX! TriumphX, a member of the Triumph Financial portfolio of brands, provides a concentration of technology and project management resources the members of the Triumph Financial portfolio of brands - TriumphPay, Triumph and TBK Bank - via a shared service model. We're looking for top tech and project management talent to analyze, recommend and build strategic solutions that support Triumph Financial's mission to become a world-class, market-leading financial and technology company. Position Summary The Senior Security Risk and Compliance Analyst is a highly respected, influential and in-demand role within the business. The position is responsible for supporting the security direction of the business and elevating the company's security posture. The analyst is expected to support the security strategy of the business within new and existing information system capabilities. Consequently, the position requires both an understanding of legacy systems, as well as new technologies and requirements. The analyst is also responsible for the planning and design of policies and maintenance. The Senior Security Risk and Compliance Analyst position reports to the VP, IT Risk &amp; Compliance and assists in the building, support and maintenance of the GRC program. The analyst will engage in many facets of the information security and GRC programs while providing guidance and functioning as an experienced resource to control owners and business partners. The analyst will be given the ability to work with various teams to identify risks, deficiencies, create controls and report progress. The analyst should be someone who works well with others, leads, motivates others and has a passion for GRC. The ideal candidate is technical and possesses at least three years of experience in security, compliance or risk management. The role oversees the business' security requirements and obligations mandated by standards and regulations such as the Federal Financial Institutions Examination Council (FFIEC), Gramm-Leach-Bliley Act (GLBA), and Sarbanes-Oxley Act (SOX). In tandem with security leadership, the analyst consistently assesses and validates the assurance of the security program. As a primary point of contact for internal and external auditors, the analyst monitors progress and enforces resolution of outstanding issues that may lead to non-compliance or security threats to the business. As a key member of the security team, the analyst must focus on strong risk management and corporate resiliency, and not be driven solely by compliance. Essential Duties &amp; Responsibilities <ul><li>Assists in implementing, supporting and maintaining an effective and mature GRC program at Triumph.</li><li>Safeguards information system assets by identifying and solving potential and actual security and risk concerns</li><li>Protects systems by defining role and attribute-based access privileges, control structures, and resources</li><li>Engages with business partners and team members on risk and compliance issue identification and remediation processes</li><li>Conducts risk and compliance assessments of IT and Security standards.</li><li>Maintain strong oversight of third parties, vendors and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered</li><li>Explains security controls with clarity to business and technical users</li><li>Performs Control Self Assessments and communicates deficiencies to control owners and management.</li><li>Assists in the design, development and remediation of IT general controls</li><li>Manages exceptions to IT and security policies.</li><li>Prepares GRC metrics and effectively communicates this through Executive level presentation and reporting.</li><li>Coordinates External (SOX, SOC1, SOC2, client and other regulatory) audits and Internal audits</li><li>Upgrades cyber security program and capabilities by implementing and maintaining security controls</li><li>Provides documentation and evidence to respond to audits</li><li>Contributes to team objectives</li></ul>Experience &amp; Education <ul><li>Bachelor's degree in Information Security, Information Systems, Computer Science, or equivalent work experience</li><li>3+ years of prior relevant IT risk, IT security and/or IT audit experience</li><li>CISA, CISM, CRISC, or CISSP certification preferred</li><li>CIS 2.0 security and NIST 800-53 framework controls</li><li>FFIEC Cyber Assessment Tool (CAT)</li><li>Experience and understanding of various regulatory requirements and laws, including but not limited to FFIEC, SOX, and GLBA. Additional experience in one or more of the following: SOC1, SOC2, ISO 27001/2, CIS or NIST 800-53.</li></ul>Skills &amp; Abilities Required <ul><li>Ability to function with limited supervision</li><li>Strong interpersonal skills.</li><li>Quality written and oral communication, and presentation skills.</li><li>Critical thinking and problem-solving skills.</li><li>Attention to detail, patience and flexibility</li><li>Commitment to operational excellence and continuous process improvement.</li><li>Strategic project management and oversight of milestones and deliverables.</li><li>Strong knowledge of IT general controls</li><li>SOC Reports (SOC1/SOC2) Type I and II</li><li>Bank Federal and State Compliance regulations</li><li>Strong knowledge of Cybersecurity and its relation to IT deployment and implementations</li><li>Agile methodology</li><li>Knowledge of Risk, Compliance and Cyber Frameworks, such as, NIST 800-53, CIS, COSO, SANS, ISO, COBIT, ITIL</li><li>IT and security policy, standards and procedures creation and maintenance</li><li>Identity Access Management and Privileged Access Management (IAM and PAM)</li><li>Role and attribute-based access controls (RBAC and ABAC)</li><li>Willingness to expand and apply security knowledge, skills, and abilities to department initiatives.</li></ul>Work Environment The work environment characteristics described here maybe encountered while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. <ul><li>Moderate noise (i.e. business office with computers, phone, and printers, light traffic).</li><li>Ability to work in a confined area.</li><li>Ability to sit at a computer terminal for an extended period of time. Occasional stooping or kneeling may be necessary.</li><li>While performing the duties of this job, the employee is regularly required to stand, sit, talk, hear and use hands and fingers to operate a computer keyboard and telephone.</li><li>Specific vision abilities are required by this job due to computer work.</li><li>Light to moderate lifting is required.</li><li>Regular, predictable attendance is required.</li></ul>#LI-JH1 We offer Medical, Dental, Vision, Paid Time Off, 401k and much more. Go on. Do it. Apply Today!

Senior Security Risk and Compliance Analyst

Sabre is a technology company that powers the global travel industry. By leveraging next-generation technology, we create global technology solutions that take on the biggest opportunities and solve the most complex challenges in travel. Positioned at the center of the travel, we shape the future by offering innovative advancements that pave the way for a more connected and seamless ecosystem as we power mobile apps, online travel sites, airline and hotel reservation networks, travel agent terminals, and scores of other solutions. Simply put, we connect people with moments that matter. The Sabre Legal organization seeks a highly motivated, experienced Privacy and Compliance Analyst. Role and Responsibilities: <ul><li>Assist in the development, implementation and ongoing maintenance of global privacy policies, procedures, requirements and notices.</li><li>Assist in conducting annual assessments of global privacy program, identify areas of opportunities and design and implement improvements to help ensure compliance with global privacy laws.</li><li>Assist in managing our OneTrust Privacy Management Platform including training and assisting teams in their use of the platform.</li><li>Assist in developing and delivering, with input from key stakeholders, enterprise-wide and role-based privacy trainings.</li><li>Support the day-to-day operations of Data Subject Rights program.</li><li>Assist in maintaining records of processing activities and data processing inventory.</li><li>Engage and liaise with other legal and business teams to provide guidance on and ensure privacy considerations are integrated into project planning and day-to-day operations.</li><li>Provide privacy guidance and requirements to business teams for the onboarding &amp; offboarding of third party vendors.</li><li>Assist in managing and maintaining privacy metrics reporting.</li><li>Assist in managing external-facing Contact Privacy inbox.</li></ul>Qualifications and Education Requirements: <ul><li>Minimum 3 years of relevant work experience</li><li>Bachelor's degree preferred.</li><li>Strong understanding of information security and data protection. </li><li>One of more IAPP certifications (e.g., CIPP, CIPM, CIPT) preferred.</li><li>OneTrust experience, knowledge and certification preferred.</li><li>Familiarity with US, EU, and other global privacy laws and regulations, such as CCPA/CPRA and GDPR.</li><li>Experience supporting privacy and consent management, individual rights, compliance processes, policies, reporting and controls.</li><li>Strong analytical, communication, organizational, and presentation skills.</li><li>Excellent written and verbal communication skills.</li><li>Must be able to develop and articulate strategy for process improvement.</li><li>Works effectively as a team member </li></ul>Sabre Offers The Following Outstanding Benefits <ul><li>Very competitive compensation</li><li>Generous Paid Time Off (25 PTO days)</li><li>4 days (one day/quarter) Volunteer Time Off (VTO)</li><li>5 days off annually for Year-End Break</li><li>We offer a comprehensive medical, dental and Wellness Program</li><li>12 weeks paid parental leave</li><li>An infrastructure that allows flexible working arrangements</li><li>Formal and informal reward, recognition and acknowledgement programs</li><li>Lots of fun and engaging employee development events</li></ul>Reasonable Accommodation Sabre is committed to working with and providing reasonable accommodation to applicants with disabilities. Applicants applying for a Sabre position with a disability who require a reasonable accommodation for any part of the application or hiring process may contact Sabre at <a href="mailto:recruiting@careers.sabre.com" target="_blank">recruiting@careers.sabre.com</a>. Determinations on requests for reasonable accommodation will be made on a case-by-case basis. Affirmative Action Sabre is an equal employment opportunity/affirmative action employer and is committed to providing employment opportunities to minorities, females, veterans and disabled individuals. EEO IS THE LAW #LI-Hybrid#LI-KN1

Privacy and Compliance Analyst

Experience GuideStone! We are an innovative organization that invests in the spiritual, relational, financial, physical and professional development of our employees. We have a culture that values excellence, teamwork, humility, integrity, compassion and stewardship. What We Offer You! We offer employees a generous benefits package, flexible work schedules, the opportunity to be involved in community outreach and tuition reimbursement. Job Summary As Compliance Analyst for GuideStone you will report directly to the Senior Manager, Mutual Funds Compliance. This position is responsible for day-to-day compliance functions and the implementation and oversight of the GuideStone Funds compliance program under Rule 38a-1 of the Investment Company Act and the GuideStone Capital Management compliance program under Rule 206(4)-7 of the Investment Advisers Act. Essential Duties &amp; Responsibilities <ul><li>Develop, maintain, and update policies and procedures of the Adviser and Funds.</li><li>Maintain relationships, perform due diligence and oversight of sub-advisers, service providers, and intermediaries.</li><li>Perform portfolio compliance monitoring for sub-advised funds.</li><li>Monitor and assess compliance risk and related controls. Develop appropriate testing strategies, conduct assessments of the Adviser and the Funds, and report findings.</li><li>Prepare and review compliance reporting materials for the Fund's Board of Directors.</li><li>Assist with the implementation of new and amended rules and regulations, and other department updates.</li><li>Represent compliance management and work with a team of other compliance professionals, attorneys, business partners, and/or project/IT teams to deliver compliant business and regulatory requirements.</li><li>Travel is required up to 5% annually.</li><li>Proven self-starter who successfully completes responsibilities in a timely manner with minimal supervision.</li></ul>Knowledge, Skills, and Abilities The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Minimum Requirements: <ul><li>Bachelor's Degree or equivalent work experience</li><li>At least 5 years of analytical or equivalent industry relevant experience (investment adviser, audit/accounting firm, broker-dealer, bank, regulatory agency, or law firm).</li></ul>Preferred Experience: <ul><li>At least 3 years of direct investment adviser and/or mutual fund compliance experience including preparation of compliance procedures and reports and performing monitoring and testing.</li><li>Understanding of regulatory compliance requirements of the Investment Company Act of 1940 (especially 38a-1 thereunder), and the provisions of the Investment Advisers Act of 1940 related to advising mutual funds. </li><li>Familiarity with financial instruments, investment strategies including complex instruments across all asset classes.</li><li>Familiarity with mutual fund operational functions including investment process (internally managed and sub-advised), trading, operations, accounting, tax, transfer agency, and custody.</li><li>Familiarity with compliance monitoring systems (e.g., Blackrock Aladdin, Bloomberg CMGR, CRIMS, SS&amp;C Eze). </li><li>Compliance industry certification (e.g., IACCP), a plus.</li><li>Must have complete confidentiality regarding GuideStone business matters.</li></ul>#LI-hybrid #LI-HM1

3 Compliance Management Systems / Technology Jobs in Dallas, TX, USA