IT Risk and Compliance Analyst

| Chicago

The Area: The Information Security department is responsible for setting enterprise security policies and standards that are designed to protect the confidentiality, integrity and availability of Morningstar information. The security team offers guidance and technical expertise in areas like application security, policies and procedures, disaster recovery and compliance/regulation. We analyze emerging security threats and conduct risk and vulnerability assessments to ensure that our information remains secure. 

The Role: The IT Risk and Compliance Analyst will assist in supporting Morningstar’s compliance related responsibilities. This individual will help document security processes and procedures, ensure current and future compliance obligations are met, assist in identifying and following up on information security risks, manage 3rd party risk management program, respond to customer RFP’s, RFI’s and contract reviews and create metrics for reporting compliance status to senior management. This position is based in our Chicago office. 

Responsibilities 
+ Execute audit tests; identify issues and areas for improvement in efficiency and effectiveness of information technology operations 
+ Assist in supporting Morningstar’s current and future compliance related responsibilities (SOX, SOC2, PCI-DSS, SEC, etc.) 
+ Support Morningstar’s compliance related responsibilities (SOX, SOC2, PCI-DSS, SEC) by assisting Internal Audit teams, coordinating with external auditors, and managing collection of audit evidence 
+ Monitor and enforce compliance to information security and compliance policies and standards 
+ Manage 3rd party risk management program 
+ Document and manage security / compliance exceptions where necessary 
+ Assist with documenting and regularly reviewing security policies, processes and procedures 
+ Respond to customer RFP’s, RFI’s and conduct relevant contract reviews
+ Monitor and enforce compliance to identity and access management controls 
+ Collect and analyze security metrics related to risk and compliance for presentation to senior management 
+ Assist with creating, publishing, presenting and maintaining security and compliance educational/training material 
+ Publish quarterly Information Security newsletter 
+ Administer internal risk management portal 
+ Liaise with third party audit personnel as required 

Requirements 
+ A bachelor’s degree and 2+ years’ experience in a risk and compliance or I.T. auditor role 
+ Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR etc.) 
+ Familiarity with IT audits and risk assessments 
+ Familiarity with security frameworks (ISO 27001, NIST, etc.) and general security concepts 
+ Strong organizational skills and the ability to multitask and switch priorities with short notice 
+ Strong business analysis, research and analytical skills 
+ Excellent communication skills 
+ Availability to work off business hours as required 

Morningstar is an equal opportunity employer. 

 

 

001_MstarInc Morningstar Inc. Legal Entity

Read Full Job Description

Technology we use

  • Engineering
    • .NETLanguages
    • C#Languages
    • C++Languages
    • JavaLanguages
    • JavascriptLanguages
    • PythonLanguages
    • ScalaLanguages
    • D3JSLibraries
    • ReactLibraries
    • AngularJSFrameworks
    • Backbone.jsFrameworks
    • Ember.jsFrameworks
    • ExpressFrameworks
    • FlaskFrameworks
    • Node.jsFrameworks
    • PlayFrameworks
    • SpringFrameworks
    • Maria DBDatabases
    • MemcachedDatabases
    • Microsoft SQL ServerDatabases
    • MySQLDatabases
    • PostgreSQLDatabases

Location

22 W. Washington , Chicago, IL 60602

What are Morningstar Perks + Benefits

Health Insurance & Wellness Benefits
Dental Benefits
Vision Benefits
Health Insurance Benefits
Retirement & Stock Options Benefits
401(K)
401(K) Matching
Company Equity
Child Care & Parental Leave Benefits
Generous Parental Leave
Flexible Work Schedule
Vacation & Time Off Benefits
Unlimited Vacation Policy
Generous PTO
Paid Volunteer Time
Sabbatical
Perks & Discounts
Casual Dress
Commuter Benefits
Happy Hours
Parking
Fitness Subsidies
Professional Development Benefits
Job Training & Conferences
Tuition Reimbursement

Additional Perks + Benefits

Compensation at Morningstar is more than a salary. It’s about making positive contributions to both life and work. We give our diverse workforce the choice and flexibility they need to maintain their health, retirement plans, time, and professional growth.

More Jobs at Morningstar72 open jobs
All Jobs
Finance
Data + Analytics
Design + UX
Dev + Engineer
Internships
Legal
Marketing
Operations
Product
Project Mgmt
Sales
Content
Finance
new
Chicago
Sales
new
Chicago
Internships
new
Chicago
Developer
new
Chicago
Operations
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Finance
new
Chicago
Project Mgmt
new
Chicago
Finance
new
Chicago
Developer
new
Chicago
Sales
new
Chicago
Developer
new
Chicago
Content
new
Chicago
Data + Analytics
new
Chicago
Marketing
new
Chicago
Operations
new
Chicago
Data + Analytics
new
Chicago
Marketing
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Operations
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Developer
new
Chicago
Design + UX
new
Chicago
Finance
new
Chicago
Sales
new
Chicago
Operations
new
Chicago
Marketing
new
Chicago
Data + Analytics
new
Chicago
Operations
new
Chicago
Developer
new
Chicago
Sales
new
Chicago
Operations
new
Chicago
Project Mgmt
new
Chicago
Operations
new
Chicago
Product
new
Chicago
Sales
new
Chicago