Summary
The Analyst, IT Risk & Compliance will support their team members in ensuring the IT Controls are working as designed and Compliance is met. The incumbent will manage the IT SOX monitoring activities and respond to any request around control validation and improvements. They are also responsible for providing the assistance to internal and external stakeholders around IT controls and supporting IT audits.
Detailed Description
Performs tasks such as, but not limited to, the following:
Data Privacy Assessment: Conducting thorough reviews of IT data collection, usage, and sharing practices across the
organization to identify potential privacy risks.
Compliance Monitoring: Monitoring adherence to privacy regulations like GDPR, CCPA, HIPAA, etc., by reviewing IT data processing activities and implementing necessary controls.
Risk Management: Identifying, assessing, and mitigating data privacy risks through proactive measures and incident response planning.
Vendor Management:



Evaluating the IT privacy practices of third-party vendors that handle personal data and ensuring compliance with relevant privacy standards.
IT Privacy Impact Assessments (PIAs): Conducting IT PIAs to analyze the privacy implications of current projects, systems, or
processes before implementation.
Awareness Training: Providing training to employees on data privacy policies, IT best practices, and handling
sensitive information responsibly.

Knowledge/Skills/Competencies
Valuable understanding of data privacy laws and regulations (GDPR, CCPA, HIPAA, etc.)
Knowledge of data management practices (HR, Finance & Legal)
Analytical skills to identify privacy risks and assess compliance
Excellent communication and collaboration skills to work with cross-functional teams
Ability to prioritize tasks and manage complex projectsStrong project planning and project control skills
Solid communication skills, both written and verbal
Ability to take initiative to achieve objectives.

📌 Analyst, It Risk Chennai
🏢 Celestica Electronics (S) Pte
📍 Chennai