Apply on Employer Site

RELX · 3 months ago

Audit & Risk Mgmt Consultant (Remote EST CST or MST)

United States

Full-time

Remote

Mid Level

$105K/yr - $175K/yr

LexisNexis Risk Solutions is a partner in the assessment of risk and is seeking an Audit & Risk Management Consultant to support government agencies in ensuring compliance with data integrity and confidentiality standards. The role involves conducting audits, managing compliance assessments, and collaborating with internal teams to enhance understanding of security policies.

AnalyticsBusiness Information SystemsConsultingInformation ServicesInformation TechnologyInsuranceRisk Management

No H1B

U.S. Citizen Only

Responsibilities

Conduct internal and customer audit and security assessment requests to document compliance with the FBI’s CJIS Security Policy

Work with agencies to determine audit and assessment requirements, develop project plans with milestones, and ensure completion with minimal supervision

Identify risks and issues and facilitate their resolution

Participate in project meetings to provide updates and deliverables

Track audit and assessment follow-up and remediation activities with POAM documentation

Liaise with internal teams to enhance understanding of the FBI's CJIS Security Policy (CSP)

Coordinate with third-party auditors to ensure timely delivery and accuracy of documentation, arrange meetings with control owners, gather audit evidence, and prepare work papers

Identify control gaps and recommend process improvements to the Director of Security and Compliance

Collaborate with the internal data protection teams for implementation of remediation and control improvements and support the privacy programs group in maintaining inventories of applications and systems in scope for assessments, updated annually

Represent CJIS requirements in product development and go-to-market initiatives

Lead, manage, coordinate, track, and identify gaps for all compliance assessments including PCI DSS, SOC 1, SOC 2, and NIST, applying the same level of rigor and oversight as with CJIS assessments

Qualification

Security complianceAudit experienceRisk managementCISA certificationMicrosoft AccessMicrosoft ExcelMicrosoft PowerPointMicrosoft WordResearch skillsWritten communicationVerbal communication