Cybersecurity GRC Analyst

Support McCormick IT transformational projects, internal IT projects, and ad hoc internal control requests from partners across the Globe. Understand Internal Audit processes related to planning, testing, and reporting for both SOX and Audit projects. Perform testing activities related to SOX compliance, key audit objectives, data analytics, etc.

Report against in progress corrective action plans for resolution of problematic issues and provide management with summary information on the status of the portfolio of corrective action plan. Discuss audit and control issues with management; support efforts in formulating recommendations for process improvements during financial & operational audits and control gap remediation identified during SOX testing.

Ability to execute a detailed audit plan and identify risk areas, develop action plans, and monitor completion.

Draft clear, concise audit reports that communicate key insights and observations to functional/business personnel and executive leadership.

Demonstrate effective teaming skills with the ability to work independently as needed; leading initiation, execution, and completion to finalization and reporting for key work tasks

Desired Skills/ Requirements:

Bachelor’s degree in Information Technology, Information Systems, Risk Management, Accounting or similar.

5+ years of experience related to internal/external audit, information technology, or internal controls.

Internal/External Audit, Sarbanes-Oxley, or other internal control (IT or operational) project experiences.

Knowledge of IT, operational, and business processes.

Knowledge of operating systems and database technologies (e.g., HANA, Windows, SQL), with a focus on SAP expertise and experience.

Understanding of core IT general control processes (e.g., Access and Change Management, System Development Lifecycle, Information Security, IT Operations, etc.), automated control processes, and overall reporting to management.

Familiarity with common technology, project management, and control assessment frameworks (e.g., NIST, COBIT).

Excellent written and verbal communication skills along with the ability to clearly communicate to key Business Partners.

Interpersonal skills; ability to work collaboratively on a team.

As a general policy, McCormick does not offer employment visa sponsorships upon hire or in the future.

McCormick & Company is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.