Senior IT Security Analyst

Summary

CHS has an exciting opportunity in our Information Technology group. We are looking for a Senior IT Security Analyst to support the Security Assurance Team, with a primary focus on managing and executing Business Access Reviews (BARs) and Privileged Access Reviews (PARs). This position supports CHS’s information risk management strategy and IT control environment by validating that access is appropriately managed, identifying and mitigating relevant risks, and supporting IT Sarbanes-Oxley (SOX) requirements. The role partners with business and technology teams, leadership, and auditors to improve control effectiveness, streamline access review processes, and support compliance activities. The ideal candidate will have advanced Microsoft Excel skills, excellent written and verbal communication skills, strong problem-solving abilities, and the ability to manage multiple reviews and priorities in a changing, team-oriented environment. 

Responsibilities

Access Reviews and Data Analysis

• Review, update, create, and manage multiple access reviews with varying stages of input and ownership, including Business Access Reviews (BARs) and Privileged Access Reviews (PARs).
• Apply advanced Microsoft Excel skills to support access review data analysis, including PivotTables, VLOOKUP, merging datasets, and reviewing duplicate records.
• Partner with business owners, technology teams, and other key contributors to obtain and review evidence supporting access reviews and technical SOX requirements.
• Manage and communicate key access review and compliance milestones for critical systems and complex processes.
• Identify and implement process improvements and opportunities to use technology to improve access review efficiency.

IT Controls, SOX, and Risk Management

• Support the objectives of the Security Assurance Team and CHS’s IT control environment in partnership with CHS leadership and key technology contributors.
• Develop plans aligned with control frameworks and requirements, risk assessments, mitigation strategies, and measures demonstrating the value of control testing and risk reduction.
• Apply established IT SOX criteria and support annual SOX reviews, testing, and remediation activities.
• Scope, interpret, and prioritize application and infrastructure testing scripts.
• Provide input on control design and identify opportunities to improve control efficiency and operating effectiveness.
• Conduct ongoing pre-assessments and risk assessments, including internal and third-party risks, and support mitigation strategies.
• Help identify new and improved ways to use technology to maintain compliance and support overall testing activities.

Collaboration, Communication, and Continuous Improvement 

• Coordinate with business teams, technology teams, internal compliance, support teams, and internal and external financial statement auditors.
• Communicate complex matters clearly and succinctly, articulate issues, provide status updates, and help drive solutions.
• Consult with leadership on opportunities to strengthen controls and improve operating effectiveness. 
• Apply experience, judgment, and problem-solving skills to resolve complex issues and prioritize work across business lines.
• Assist with new technology implementations and vendor selections to support automation and process efficiency.
• Coach employees and partners on appropriate methods for protecting information resources.
• Assist with communications, engagement, and training plans that promote shared security accountability.
• Maintain and promote a strong security culture.
• Perform other duties as assigned 

Minimum Qualifications (required)

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, Information Technology Management, or related field (or equivalent years of experience, education and training)
• 4+ years of IT Security experience to include:
  • Advanced knowledge and expertise in MS Excel 

Additional Qualifications

• Demonstrated experience with Access Reviews
• Knowledge and experience with fuel Point-of-Sale (POS) equipment
• Knowledge and experience across multiple Information Security domains
• Ability and willingness to keep up with emerging security technologies and trends
• Experience in the agricultural, grain, energy, and consumer foods industries

Pre-employment screening is based on the job requirements and industry guidelines and may or may not be required for the position. If required, selected candidates must pass pre-employment screenings to include all or a combination of drug, criminal, motor vehicle check, physical requirements and FMSCA Clearinghouse.