Thomson Reuters

Senior Cyber Compliance & Audit analyst

Join Thomson Reuters as a Senior Cyber Compliance & Audit Analyst in Richmond, VA. Leverage ServiceNow for compliance audits, ensuring effective controls. 4+ years in ITGC/SOC required. Enjoy hybrid work, career growth, and competitive benefits.

ServiceNow Role Type:
Department - JobBoardly X Webflow Template
System Administrator
ServiceNow Modules:
Department - JobBoardly X Webflow Template
Governance, Risk, and Compliance
ServiceNow Certifications (nice to have):
Department - JobBoardly X Webflow Template
Certified System Administrator

Job description

Date - JobBoardly X Webflow Template
Posted on:
 
April 18, 2025

We are hiring a Senior Cyber Compliance & Audit analyst to assess, challenge, and test the design and operational effectiveness of controls using TR's control framework. The role involves overseeing and acting as a liaison for both external and internal audits, identifying procedures and practices that are not compliant with industry frameworks, and recommending changes to address non-compliance issues.

Requirements

  • Bachelor's degree in IT, Accounting, Finance or equivalent education and experience (preferable)
  • At least 4+ years of relevant work experience in SoX, ITGC, SOC, PCI within Audit, Big 5, consulting firms or as line 1a or line 1b completing IT-IS Control testing or working within a Governance or Compliance function across Financial Services organizations
  • One of these certifications in order of preference is essential CISA, CISSP, CCAK, CISM, CRISC or ISO (preferred)
  • Awareness about common security vulnerabilities of web and cloud applications and operating techniques from sources such as SANS, OWASP Top10 and Cloud Security Alliance (CSA)
  • Experience in testing Cloud controls and related technologies will be an asset
  • Excellent oral and written communication skills in English. Additional expertise in French, Spanish or another language will be an asset
  • Knowledge about GRC platforms like ServiceNow, Process Unity, RSA Archer, MetricStream and like

Benefits

  • Hybrid Work Model
  • Flexibility & Work-Life Balance
  • Career Development and Growth
  • Industry Competitive Benefits
  • Culture
  • Social Impact
  • Making a Real-World Impact

Requirements Summary

4+ years of experience in ITGC, SOC, PCI within Audit, Big 5, consulting firms or as line 1a or line 1b completing IT-IS Control testing, or experience in testing Cloud controls and related technologies will be an asset