IT General Computer Controls Specialist

SUMMARY: The IT GCC Compliance Administrator is responsible for monitoring, documenting, and evidencing of the IT General Computer Controls as defined by EMSC, including Logical Security Access, Change Management / SDLC, and Data Center Controls. The qualified candidate will report to the IS Security Manger and will work closely with the control owners to ensure adequate, timely documentation exists, and is readily available to internal and external auditors.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

•Logical Security Access
oRegular reporting and reviewing of network accounts
?Corrections to any accounts that need to be disabled, moved or have descriptions added
oCreate regular reports with specified elements for Audit requests
oCreate and distribute reports of all application accounts for review and sign-off by Application owners.
oCreate reports with specified attributes for Audit requests
oCreate and Maintain Control evidence documentation
oRequest and document review evidence from Business units and application owners
•Change Management / SDLC
oReview all system changes for appropriate documentation and sign-off evidence
oReview the change management logs for completeness
oCollect and review SDLC documentation for completeness
o Follow-up with change owners on any missing documentation
•Data Center Controls
oReview documentation for completeness
oFollow –up with control owners for any missing evidence
oGenerate and distribute access reports for managerial review.


•Adhere to all company policies and procedures.

•Perform other duties as assigned.

Effective information systems security is a team effort involving the participation and support of every EMSC employee who deals with information and/or information systems. It is the responsibility of every Information Systems employee to: Attend Information Systems security training, when offered. Comply with Information Systems security policies, standards and procedures. Use all available protections to safeguard computer systems under their charge from unauthorized access. Report all suspicious requests, incidents, and situations
REQUIREMENTS
MINIMUM QUALIFICATIONS:

Education: Associates Degree in Information Technology or related field
Experience: 2 – 5 years of IT related administrative duties.

The qualified candidate must have working knowledge of Information Technology Access systems such as Active Directory, Novell, Windows NT, UNIX,
Good knowledge of general Access Control concepts,
Familiarity with Sarbanes Oxley General Computing Controls
Intermediate to advanced MS Office (Word, Excel, Access) skills.
Effective oral, written and interpersonal communication skills a must.
Attention to detail required.