Lead Compliance & Performance Analyst

Description

Job Summary
The purpose of this role is the performance and monitoring for daily activities in support of NiSource's Sarbanes Oxley compliance (SOX). Responsibilities within the department will include professional level work in the preparation, analysis, and validation of IT SOX controls as required by the SOX Compliance office on a quarterly basis. This position will also be responsible for timely and properly documented control testing plans, information provided by entity documents, and control remediation activities.
The role provides results in support of SOX IT General Controls testing and reporting requirements and assists in coordinating the company-wide effort to comply with applicable Sarbanes-Oxley regulations. This role will collaborate with internal and external audit teams, IT Risk, management, operational departments, and other stakeholders to ensure that Compliance requirements are met.

Essential Functions

• Work with Control Providers and subject matter experts to incorporate the performance of SOX testing procedures in meeting the requirements of the business process being tested.
• Prepare test plans for SOX controls in compliance with quarterly SOX requirements, and including the gathering of supporting documentation.
• Perform quarterly testing within the timeline required by SOX Compliance office.
• Maintain properly documented testing evidence and results within IT SOX Compliance site and perform quarterly upload to SOX Compliance database.
• Prepare test plans for ITGC controls in compliance with ITGC requirements (SOX, NIST), including the gathering of supporting documentation.
• Identify potential control deficiencies while working with support teams and process owner to uncover root cause and request implementation plans to alleviate weaknesses exhibited within the process.
• Assist in the facilitation of external audits and the remediation of issues identified. Maintain appropriate historical records related to the IT SOX Audit.
• Provide regular updates to the IT SOX Compliance manager regarding the status of the SOX testing status, issues identified, and the decisions regarding the solutions to address the identified problems.
• Maintain current knowledge regarding changes to processes that could affect the Control Universe (SOX, NIST, Privacy, CSF).
• Implement process for PII validation on all NiSource systems and data.
• Perform privacy assessments to ensure compliance to privacy laws.
• Perform regular Compliance activities and implement automation around data gathering.
• Perform NIST 800-53 and NIST 800-171 assessments
  
   
• Required Qualifications For Position
• Bachelor's Degree Requires a Bachelor’s Degree in Information Systems preferred or Business administration or process management along with work experience
• Experience working closely with service providers and delegating operational activities to them, as directed by a director or manager.
• 7-9 years 7 years of experience in Sarbanes Oxley audits, Information systems audits, and IT Operations
• Demonstrated experience in SharePoint, ServiceNow, and MS Office
• In-depth experience with ITIL processes and metrics
• 1-3 years 2 or more years’ experience in IT support function
• Knowledge of IT Infrastructure components, trends and best practices.
• Can work independently in the assigned functional domain
• Understands Project Management Fundamentals
• Strong teaming skills, collaboration, negotiation, communication, organizational, people management and conflict resolution skills
• Excellent analytical abilities, including process analysis and development, problem solving and root cause analysis
• Knowledge of COSO and CoBit control framework/controls
• Willing to travel to NiSource business unit or Service Provider locations, as needed
• NiSource business operations knowledge
• Knowledge of ITIL processes and metrics
• General working knowledge of the gas and electric utility industry
• ITIL Foundations v4 must be ITIL V4 certified Upon Hire
• Certified Information Systems Auditor (CISA) Upon Hire
• Certified Information Security Manager (CISM) Upon Hire
• Preferred Additional Qualifications for Position
  
  Physical Demands
  
  
  The preceding description is not designed to be a complete list of all duties and responsibilities required of the position.

Inclusion & Diversity 
Value inclusion within your day to day responsibilities by respecting others perspectives/convictions, engaging others opinions, creating a safe environment where people, ideas, and opinions are valued within your Team/Customers and external partners.

Respect and take into consideration diversity within your Team/Customers and external work partners by valuing different world views, challenges, and cultures that represent all walks of life and all backgrounds.

Treat others with respect and consideration. Actively participate in creating and contributing to a positive work environment.

Equal Employment Opportunity 
NiSource is committed to providing equal employment opportunities in each of its companies to all employees and applicants for employment without regard to race, color, religion, national origin or ancestry, veteran status, disability, gender, age, marital status, sexual orientation, gender identity, genetic information, or any protected group status as defined by law. Each employee is expected to abide by this principle.

By applying, you may be considered for other job opportunities. 

Salary Range:

Posting Start Date:

Posting End Date (if applicable):