Fujitsu America Richardson , TX 75080
Fujitsu America, Inc. provides a complete portfolio of business technology services, computing platforms, and industry solutions. Fujitsu platform products are based on scalable, reliable and high-performance server, storage, point-of-sale, and mobile technologies.
Fujitsu combines its renowned platform offerings with a full suite of onshore, near shore and offshore system integration, outsourcing, and datacenter services covering applications, operations, infrastructure, customer service, and multi-vendor lifecycle services. Fujitsu provides industry-specific solutions for retail, manufacturing, healthcare, government, education, financial services, and telecommunications sectors. For more information on Fujitsu America's business scope, visit http://solutions.us.fujitsu.com/
FAI is seeking a motivated, collaborative and technically astute Senior Information System Compliance Analyst to join our Information Systems Compliance team in our Richardson, TX campus. The IS Compliance team is currently focused on, but not limited to PCI, ISO 27001, SOC1, SOC2, GDPR, SOX and HIPAA requirements.
1.Plan, direct and execute internal and external PCI assessments for FAI as well as our clients. This role will act as the subject matter expert (SME) on PCI-DSS-related requirements and control testing in a multi-tenant environment. Additionally, consult with delivery towers and other business units on the interpretation of PCI security domains and design.
2.Play a lead role in the oversight and delivery of internal IT audit services, SSAE18 SOC1 and SOC2 IT-related internal control testing in a multi-tenant environment.
3.Plan, assist and/or execute internal IT foundational control assessment / testing based on ISO 27001. Identify control weaknesses, prepare reports, corrective action plans and facilitate remediation activities. Identify opportunities for automated testing.
4.Manage and execute audit evidence collection and review activities for assigned frameworks. Request, collect and organize audit evidence artifacts. Review artifacts for appropriateness, completeness, accuracy and proprietary information. Submit evidence to external auditors as appropriate.
5.Serve as a subject matter expert and resource on IS compliance-related issues and requests
6.Perform IT risk assessments. Assess relevant risks to determine appropriate audit objectives, scope and procedures. Develop recommendations to mitigate risk, improve operations and/or reduce cost.
7.Research and respond to vendor security questionnaires from current and potential FAI clients
8.Perform research on regulatory changes, technology products/trends and professional standards as it relates to IT controls and the IT audit profession and communicate with appropriate stakeholders.
9.Support business continuity planning
10. Performs other duties as assigned.
1.Bachelor's Degree required, with special emphasis in Management Information Systems, Computer Information Systems and/or Accounting Business Majors preferred; or equivalent combination of education and experience.
2.A minimum of 4 years of professional experience working in the areas of IT audit, IT controls assessment and/or compliance evaluating and testing.
3.A minimum of 2 years of professional experience working in the areas of Payment Card Industry (PCI) PA and PCI-DSS assessments.
4.Experience in developing IT audit work programs and/or assisting in IT and/or compliance audits.
5.Strong knowledge of Information Technology and Information Security Concepts
6.Working knowledge of IT networking, firewall/IPS, authentication and operating systems
7.Strong written and verbal communication skills with the ability to effectively communicate with both technical and non-technical personnel
8.Ability to interpret management, operational and technical implementation methods to determine compliance with existing controls
9.Strong detail orientation, follow-through capabilities and escalation of key issues
10. Strong analytical and problem solving skills
11. Proficiency in Microsoft Excel, Word, Visio and PowerPoint
12. Ability to work independently and in some cases with limited guidance.
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.