GRC Senior Analyst

Basic Function

The Governance, Risk, and Compliance (GRC) Senior Analyst will be responsible for supporting the Company’s compliance with legal, regulatory and contractual requirements to ensure the adequacy of Information Technology (IT) internal controls and processes in both design and application.  This role will work closely with IT operations and IT business users as an expert resource of IT compliance bringing forth opportunities for enhancements as part of performing technical assessments of IT controls, IT compliance reviews, and review of the documentation for IT policies, processes, and controls.  This position will also monitor, and as necessary, coordinate IT compliance activities with both internal and external auditors.

Roles & Responsibilities

•    Partner with IT stakeholders to be the “bridge” between interpreting IT compliance requirements and designing/implementing processes and controls that satisfy requirements aligned with ISO 27001, NIST 800-171, and Sarbanes Oxley (SOx)
•    Facilitate annual review of IT process documentation and controls, analyzing the impact of changes with respect to compliance control requirements and control objectives
•    Work with stakeholders to identify potential areas for IT controls efficiency, such as consolidating or automating processes
•    Conduct regular assessments via testing to identify IT compliance gaps and recommend corrective actions
•    Consult with both internal and external audit to facilitate audits, validate findings, and develop actions plans with IT management
•    Support and improve LyondellBasell’s Information Security Management System (ISMS) within the context of the ISO 27001 standard.  Support annual ISO 27001 external audit
•    Develop and conduct training and awareness programs to foster a culture of IT compliance within LyondellBasell, ensuring employees and contractors are well-informed and operating as expected.
•    Provide expertise and assistance on projects/initiatives, evolving regulations and IT compliance matters
•    Communicate clearly, concisely, and accurately using professional oral and written communications with all levels of management
•    Develop and maintain productive working relationships within IT, Internal Audit, Risk, and other stakeholders

Min. Qualifications

•    Bachelor’s degree in computer science, information systems, business administration, or related field 
•    3+ years of practical experience in IT Compliance, Governance Management, and/or IT Audit
•    Certifications: CISA, CRISC, CISSP, or other security recognition desirable
•    Functional experience in the following areas:

• Development of IT policy, standards, and controls
• Experience with the review, testing, and reporting on the effectiveness of IT controls
• Competency with ISO 27001/27002, Sarbanes-Oxley, and COBIT control frameworks
• Hands-on technical experience and expertise with emphasis on security and risk management 
• Strong preference will be given to candidates with track record of IT controls automation and consolidation 
• Experience working within a GRC tool desired

•    Experience working in an International/multi-cultural environment  
•    Communicates effectively, both formally and informally.
•    Ability to manage and conduct meetings effectively and efficiently
•    Initiative-taking with the ability to manage multiple deadlines
•    Ability to work independently and make sound decisions while meeting time sensitive deadlines
•    Excellent verbal and written communications skills.  English is primary language

Preferred Qualifications

Competencies

We Offer

We offer an environment where we encourage personal and professional growth and where you will be rewarded for your performance and results. You will have the possibility to work with specialist on all fields to develop innovative solutions and to extend your national and international network. In addition, we offer you a competitive salary and benefits package.

The Company's Global Remote Work Policy allows eligible employees the option to work up to three days a week from home.

LyondellBasell is committed to advancing diversity, equity & inclusion (DEI) to ensure a positive experience for all employees.
 

Application & Contact

Please send us your resume via the application button.

If you would like to learn more, please feel free to contact Martyna Piechowiak, Talent Acquisition Specialist at martyna.piechowiak@lyondellbasell.com 

#LI-MP1  #LI-Hybrid