Summary: 

The Specialist, IT Risk and Compliance is responsible for ensuring the IT Controls are working as designed and Compliance is met. The incumbent is able to interact with internal and external stakeholders and provide support and guidance around IT policies, risk and compliance.

Detailed Description: 

Performs tasks such as, but not limited to, the following:

• IT SoX controls testing monitoring based on the IT SoX requirements. 
• Participates in the IT Risk assessments around data in scope for SoX and Crown Jewels 
• Support the Data Loss Prevention program.
• Assist in developing and maintaining Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for the Data Governance Security Program and initiatives.
• Provide guidance on IT controls improvements and implementation, assisting with the IT controls updates and re-design
• Participates on IT compliance projects and ensures team members are provided with timely and accurate project information and status updates. 
• Participates in the audit process - enforces compliance measures to ensure audit readiness and assists internal and external auditors with the audits.
• Leadership - provides performance feedback on team members as well as instructs and supervises the work of IT Student Interns.
• Assists with policy and process changes to ensure the documents are up to date
• Interfaces with the business and IT teams where required to apply IT controls and/or improvements to the existing IT controls.

Knowledge/Skills/Competencies: 

• In-depth knowledge of the IT General Controls framework process. 
• Data security/privacy experiences including but not limited to, data classification, data encryption, data desensitization, etc
• Must have experience in designing and implementing the data security solutions
• Applicable experience with information security technologies including GRC technology platforms, encryption, Data Loss Prevention (DLP).
• Knowledge of the latest technical developments in encryption technologies. 
• Ability to provide assistance around ITGC to individuals outside the immediate work unit/team. 
• Knowledge of Celestica’s technology, business and IT strategies. 
• Knowledge of IT analysis, design and development. 
• Proficient in IT Security 
• Proficient in Data Management and Analytics 
• Proficient in Delivering Initiatives within the Operating Model 
• Intermediate level of understanding in Project Management 
• Intermediate level of understanding in Architecture and Solution Integration  
• Proficient in Business Partnering 
• IT Penetration Testing 
• Proficient in IT Risk Management  
• Proficient in IT SoX Compliance 
• IT Security Architecture 
• IT Compliance Standards and best practices  
• Ability to work in a team environment 
• Change Management and project management skills 
• Excellent resource management and prioritization skills. 
• Excellent analytical skills 
• Excellent verbal and written communication skills 
• Knowledge of IT SoX audit framework and requirements 
• Knowledge of IT audit procedures and techniques