Risk & Compliance Auditor II

Requisition #: 20765

Functional Area: Risk & Compliance; Audit/Risk/Compliance

Employment Type: Full-Time

Work Options: In Office / Partial Remote from Neenah/Appleton/Oshkosh area #LI-Hybrid

Work Hours: Monday - Friday, 8:30 a.m. - 5:00 p.m.

Position Summary

At J. J. Keller, we protect people and the businesses they run. The Risk & Compliance Auditor II drives audit, risk, compliance, and information security initiatives to help ensure effective controls, regulatory compliance, and continuous improvement across the organization. This role partners with teams throughout the business to identify risks, manage remediation efforts, and support compliance with industry and customer requirements.

Job Responsibilities

• Coordinates and conducts internal and external audits for SOC 2 Type II, ISO 27001, PCI-DSS, Professional Background Screening Association standards (FCRA) and other standards. Evaluates audit results, recommends improvements, and issues deficiency notices as needed. Evaluates, monitors and consults on resulting corrective action plans and remediation efforts.
• Coordinates and manages the completion of penetration tests with external consultants and internal resources, and the development, implementation, and monitoring of related corrective action plans, and distribution of resulting reports to interested parties.
• Reviews policies, guidance and training for information security, and provides consulting services promoting overall achievement of corporate security objectives and compliance with regulatory and customer requirements.
• Maintains security incident response plans and metrics. Leads evaluation of security incident reports, and execution of incident response efforts, including task management, resource coordination, after action reviews, and incident documentation. Participates in business continuity efforts by assisting with annual security incident tabletop exercises and generating a post-exercise review.
• Manages the Optro Governance, Risk & Compliance software platform, including creating audits, deploying audit questions, entering corrective actions, generating reports and monitoring completion status.

Triages security policy exceptions Evaluates and consults on the business risks and proposed compensating controls. Follows up on approved exceptions expiring.

Qualifications

Education and Experience Requirements

• Bachelors degree in Business or related field required.
• Minimum of 3 years of related auditing experience required, including exposure to information security controls.

Other Skills/Qualifications

• Experience addressing security and compliance terms in commercial contracts.
• Experience with ISO 27001 and privacy frameworks, and auditing to those frameworks.
• Experience completing security questionnaires and evaluating vendors.
• Experience with Governance, Risk and Compliance tools.
• Strong interpersonal, written, and verbal communication and presentation skills.
• Strong analytical, problem-solving, and conflict management skills.
• A curious and practical mindset that can balance compliance with ethical and business needs.
• Ability to work cross-functionally, with many teams, including sales, infrastructure, security, and product teams.
• Ability to influence and lead business partners and supporting teams.

Physical Requirements

Work is performed primarily in a standard office environment. Work involves operation of personal computer equipment for extended periods of time.

We Protect People & The Businesses They Run

Every associate at J. J. Keller makes a difference by creating safer, more respectful workplaces. Whether serving our customers directly with expertise in safety and regulatory compliance or supporting the business with specialized skills, together we contribute to better workplaces for people across North America.

J. J. Keller History: November 1, 2023, marked 70 years of business for J. J. Keller & Associates, Inc. Click HERE to take a tour through three generations of this family-owned business - from our founding as a one-man consulting firm through decades of delivering on our purpose of protecting people and the businesses they run.

J. J. Keller Career Stories: Click HERE to hear from our associates about what they have to say about life as an associate at J. J. Keller.

J. J. Keller Earns 8th Great Place to Work Certification: Click HERE to find out what makes J. J. Keller great.

J. J. Keller Certified as a Top 100 Most Loved Workplace in America: Click HERE to find out why our associates LOVE working at J. J. Keller.

2024 Top Company for Women to Work for in Transportation: Click HERE to learn more about this prestigious recognition.

If you experience system-related issues or need assistance with the online application, please call (920) 720-7700.

Professional Referral Program: Not the right role for you, but know someone who could be a great fit? Click HERE to refer them to us through our Professional Referral Program and you will earn a cash payment if your referral is hired.

J. J. Keller & Associates, Inc. is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.