IT Risk Analyst (Hybrid)

About the role: 

As an IT Risk Analyst, your job will be to assist in IT and cybersecurity risk assessments of existing or new business processes, services, and technologies. You’ll be collaborating with just about every organizational function and will utilize your incredible people skills and ability to communicate technical concepts to both technical and non-technical audiences to gain trust and respect by delivering straightforward results and solutions.Through your leadership ability and curiosity you will improve controls, policies and processes. You will have strong decision-making capabilities with the ability to weigh relative costs and benefits of potential actions and identify the most appropriate one for Enova.

About our IT Risk Management team: 

We work in conjunction with legal, compliance, back office operations, analytics, operations, technology, and software development. We are expected to be the experts in security and risk management, while being able to identify, analyze, and influence the management of information risks to the business in order to make sound decisions for Enova. What makes us great is that we work as a team, are passionate about our jobs and our ability to provide immense value to the company.

Responsibilities:

• Perform focused cybersecurity risk assessments and communicate cybersecurity risk assessment findings and gaps to process owners and other risk business partners to allow them to make informed risk mitigation decisions
• Assist control owners in identifying and facilitating implementation of appropriate control measurements, demonstrate controls are in place and effective at risk mitigation 
• Assist with evaluating third party risks to Enova and responding to third party vendors security questionnaires about Enova’s controls 
• Assist with collecting metrics for reporting to senior management and educating our associates on appropriate security measures.

Requirements: 

• Have 2+ years of experience in an information security, cybersecurity risk, compliance or IT auditor role
• Knowledge of common compliance standards (SOX, SOC2, PCI-DSS,, CCPA, etc.) 
• Knowledge of security frameworks (NIST, ISO etc.),
• Knowledge of IT Audits and Risk Assessments
• Strong organizational skills and the ability to multitask and switch priorities with short notice
• Strong business research and analytical skills

Compensation: 

The budgeted annual salary range for this position is $49,000 - $70,000. Actual annual salary will be determined based on qualifications, skills, experience, and level assessed during the hiring process and may fall outside of the range shown. Additional compensation for this role may include a bonus. All full-time employees are eligible to participate in Company benefits, described in more detail here.

Being a values-driven organization is at the core of Enova’s success. We live our values by listening to our customers, challenging assumptions, thinking big, setting high expectations, and hiring and developing the best. Through our values and our commitment to making Enova an awesome place to work, we maintain an environment of inclusion and culture where our employees can thrive. You can learn more about Enova’s values and culture here. 

It is our policy to provide equal employment opportunity for all persons and not discriminate in employment decisions by placing the most qualified person in each job, without regard to any other classification protected by federal, state, or local law. California Applicants: Clickhere to review our California Privacy Policy for Job Applicants.