IT Governance / Process Specialist 1-5 yrs

About Company

Agilysys is well known for its long heritage of hospitality-focused technology innovation. The Company delivers modular and integrated software solutions and expertise to businesses seeking to maximize Return on Experience (ROE) through hospitality encounters that are both personal and profitable. Over time, customers achieve High Return Hospitality by consistently delighting guests, retaining staff and growing margins. Customers around the world include branded and independent hotels; multi-amenity resort properties; casinos; property, hotel and resort management companies; cruise lines; corporate dining providers; higher education campus dining providers; food service management companies; hospitals; lifestyle communities; senior living facilities; stadiums; and theme parks. The Agilysys Hospitality Cloud combines core operational systems for property management (PMS), point-of-sale (POS) and Inventory and Procurement (I&P) with Experience Enhancers that meaningfully improve interactions for guests and for employees across dimensions such as digital access, mobile convenience, self-service control, personal choice, payment options, service coverage and real-time insights to improve decisions. Core solutions and Experience Enhancers are selectively combined in Hospitality Solution Studios tailored to specific hospitality settings and business needs. Agilysys operates across the Americas, Europe, the Middle East, Africa, Asia-Pacific, and India with headquarters located in Alpharetta, GA. For more information visit ww.Agilysys.com.

Information Security Governance Risk and Compliance Analyst, IDC

 At Agilysys, Inc. we are proud of our 3,000+ customers including some of the world’s most recognizable resort, casino and cruise line brands. We specialize in market-leading point-of-sale, property management, inventory and procurement, and mobile and wireless solutions that are designed to streamline operations, improve efficiency and enhance the guest experience. We serve casinos, resorts, hotels, food service venues, stadiums, cruise lines, grocery stores, convenience stores, general and specialty retail businesses and partners. With extensive operations, across North America, Europe, Asia-Pacific, and India with headquarters located in Alpharetta, GA, we are growing. For more information, visit: www.agilysys.com.

 The Information Security Governance Risk and Compliance Analyst reporting to the Governance Risk and Compliance manager will support SOC2, PCI, and quarterly audits. You will also be performing security and IT controls testing across all information technology disciplines. You will leverage industry best practices and business needs to help advance the compliance program and support the information security risk management program. Information Security Governance Risk and Compliance Analyst will work with stakeholders across the enterprise to gaps, and work with owners to develop timely solutions to reduce IT security risk across the organization.

 We are looking for individuals that understand the technical that they are performing controls testing on working closely with other members of the Governance Risk and Compliance team.

 Your duties will include:

• Review vendor SOC reports for appropriate IT controls, as part of the Vendor Risk Monitoring program.
• Review process documentation and assist control owners to develop repeatable processes, help create flow charts, and procedures to remediate control gaps.
• Collect and report on remediation plans along with charting progress of open risk items to resolution.
• Conduct testing of IT Controls for SOC 2, PCI and SOX to identify and evaluate risk exposures and determine the effectiveness of relevant controls.
• Maintain security configuration standards for systems and business applications.
• Assist in maintaining the GRC toolsets and responding to security questionnaires .
• Participate in risk management / third-party risk management activities.
• Create status reports for management on open findings.
• Keep senior team members apprised on the status of information security issues and initiatives.
• Other duties as assigned.

 Requirements for success:

• 2 to 4 years of experience in information security experience.
• Experience with compliance requirements for PCI, SOX, and SOC.
• Knowledge of multiple computing platforms including Azure, Windows, Linux, networks, and endpoints.
• Knowledge of a wide variety of information security concepts, services, and technologies.
• Experience working in a global organization with stakeholders located across the globe.
• Experience in External audits - SOC, PCI audits, ITGC controls and Risk management frameworks. Good knowledge on SSDLC.
• Ability to problem solve and manage business needs/IT changes in a rapidly changing complex technical environment.
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization.
• Proficiency in establishing and maintaining effective working relationships with coworkers.
• CISSP, CISA, SANS GIAC, or relevant security certification(s) is a plus.