Risk & Compliance Auditor II

Position Summary

At J. J. Keller, we protect people and the businesses they run. The Risk & Compliance Auditor II supports the organization's audit, risk management, compliance, and information security programs. This role coordinates audits across multiple regulatory and industry frameworks, identifies and assesses risks, drives remediation efforts, and helps ensure compliance with customer, contractual, and regulatory requirements. Working cross-functionally with teams throughout the business, this position provides guidance on security and compliance best practices and contributes to the continuous improvement of governance, risk, and compliance processes.

Job Responsibilities

• Coordinates and conducts internal and external audits for ISO 14001, ISO 45001 and ISO 9001 and other standards. Evaluates audit results, recommends improvements, and issues deficiency notices as needed.  Evaluates, monitors and consults on resulting corrective action plans and remediation efforts.
• Coordinates the project management activities for the completion of penetration tests with external consultants and internal resources, and the development, implementation, and monitoring of related corrective action plans, and distribution of resulting reports to interested parties.
• Evaluates information security and privacy practices of vendors/suppliers to ensure alignment with company standards.
• Responds to customer inquiries regarding the company’s security strategy and practices.
• Participates in business continuity efforts by assisting with annual security incident tabletop exercises and generating a post-exercise review.
• Participates in management of the Optro Governance, Risk & Compliance software platform, including creating audits, deploying audit questions, entering corrective actions, generating reports and monitoring completion status.
• Participates in the triage and completion of data security incidents, security policy exceptions and vulnerability exceptions. Evaluates and consults on the business risks and proposed compensating controls. Follows up on approved exceptions expiring.
• Processes insurance claims for the Risk & Legal business unit.

Qualifications

Education and Experience Requirements

• Bachelor's degree in Business or related field required.
• Minimum of 3 years of related auditing experience required, including exposure to information security controls.

Other Skills/Qualifications

• Experience addressing security and compliance terms in commercial contracts.
• Experience with ISO 14001, ISO 45001, or ISO 9001 and quality frameworks, and auditing to those frameworks.
• Experience completing security questionnaires and evaluating vendors. 
• Experience with Governance, Risk and Compliance tools.
• Strong interpersonal, written, and verbal communication and presentation skills.
• Strong analytical, problem-solving, and conflict management skills.
• A curious and practical mindset that can balance compliance with ethical and business needs.
• Ability to work cross-functionally, with many teams, including sales, infrastructure, security, and product teams.
• Ability to influence and lead business partners and supporting teams.

Physical Requirements

Work is performed primarily in a standard office environment.  Work involves operation of personal computer equipment for extended periods of time.