Staff Identity Management Analyst - IT

Staff Identity Management Analyst

Job Description :

- The Staff Identity Management Analyst will be responsible for regulatory and internal IT compliance tasks for new and existing non-commercial (e.g., GE Enterprise) products and processes for the Digital business organization.

- They will focus on Identity Management compliance but will be pulled into other compliance activity as needed.

Essential Responsibilities :

In this role, you will :

- Understand regulatory and internal requirements and needs;

- Review applicable regulatory documentation and establish applicability of requirements to IT and Cyber Security. Stay proactive with regulatory and internal requirements;

- Coordinate access reviews and perform follow-ups to ensure that all reviews are completed;

- Liaison with process owner for their process/tools and access revisions (GE Corporate during TSA period,as we move off GE TSA);

- Provide reporting and escalation for process and results;

- Identify and implement improvement opportunities in the identity management controls and process;

- Work with transition team to define identity management requirements and ensure that needed capabilities, controls and process revisions are included in new infrastructure;

- Recommend and, in cooperation with subject matter experts, develop appropriate controls what would address regulatory and internal requirements, especially related to Identity Management and access controls;

- Provide control owners support with the implementation of required controls, focused on Identity Management;

- Responsible for building and maintaining a control library and controls life-cycle management process;

- Enforce compliance; provide controls assurance by evaluating controls ability to mitigate controls they were intended for. Ensure control effectiveness and efficiency;

- Responsible for coordinating and ensuring the execution of risk and regulatory IT compliance-related tasks for new non-commercial products, process and events that impact or require the services of the Digital business organization. Examples of new products/processes include: cloud-based services and new Digital applications;

- Uphold regulatory requirements and utilize appropriate application classification, organizational capabilities and risk appetite for assurance scheduling;

- Operationally maintain IT Tool Compliance repository and supporting operational processes;

- Assist in the development of the IT Tools quarterly report, schedule and own report content drafting while working with appropriate Legal and other IT Compliance team members for review and approvals and obtain required language translations;

- Work with the Compliance team members to ensure weekly call agendas and other corresponding supporting tasks are completed in preparation for operational calls, along with other ad-hoc IT Tool compliance reviews;

- Partner with peers to suggest process improvements for the Access Management, Data Privacy, IT Controls, and other IT Compliance areas;

- Design and support IT Regulatory compliance processes as assigned, respond to requests for assistance from Digital Technology, and work with others in IT, HR and Legal to resolve concerns associated to these IT compliance processes as appropriate;

- Assist and or perform IT compliance assessments for new or existing IT products/processes, with emphasis on cloud services and in the areas of Access Management, Data Privacy, IT controls, and other regulatory or security controls including preparing draft assessment reports and coordinating leadership reviews;

- Assist with maintenance and improvements on underlying processes and content on the team portals;

- May perform other duties & responsibilities as assigned.