IT Controls Engineer

Company: loanDepot
Location: Lake Forest
Posted on: May 5, 2021

Job Description:

We are at the forefront of change in this rapidly evolving lending market. mello---, the Greek word for "future," was the product of a recent $80+ million dollar investment in research & development to transform & streamline the home buying process into a digital experience like no other competitor offers. But mello--- is just the beginning--- loanDepot will continue to invest in developing our own advanced technology ecosystem built around serving our customers & enabling our valued employees to provide exceptional service. We have funding, we have opportunities, you have ideas-it's a perfect match. Come join us!loanDepot - We are America's Lender.Position Summary: Responsible for supporting initiatives that provide reasonable assurance that SOX compliance is achieved, personally identifiable information (PII) is identified and prioritized based on its value, adequately safeguarded from misuse and theft, maintained in a manner that satisfies legal requirements, and is appropriately available to meet business needs. Supports governance structure and is accountable for completing Information Security, Privacy, and IT Risk compliance related activities. This position ensures the performance of all duties in accordance with the company's policies and procedures, all U.S. state and federal laws and regulations, wherein the company operates.Responsibilities:Conducts comprehensive risk assessments against SOX controls to identify gaps and collaborate with business owners to develop remediation plans, monitoring, and reporting, to ensure compliance by end of year.Plays a prominent role with the administration and development of methodologies that support functional security processes.Serves as an Information Security, Privacy, and IT Risk liaison to cross-departmental stakeholders in connection with business activities, supporting the establishment of solutions that integrate IT control requirements with business priorities.Conducts detailed/complex risk assessments (e.g., Framework Assessments, Policy/Procedure Review, Operational Review, Vendor Review, Contract Review, Audit) to understand the risk landscape and to target mitigation steps.Communicates with information security leadership on risks identified as a result of IT Risk, Privacy, Records Management, and Security reviews. Assists with development of action plans for issues/gaps identified during reviews.Analyzes and assists with risk register items through the IT Risk Management process including assigning ownership, partnering with the owner and additional stakeholders to develop realistic and attainable action plans, following up on action items through completion, as well as monitoring and reporting following completion to ensure the new processes continue to be followed.Evaluates, recommends, develops, and implements security policies, procedures, standards, and runbooks to support the Information Security, Privacy, Records Management, and Information Technology, risk assessment and risk mitigation efforts.Monitors developments to maintain knowledge of current information Security and Privacy events, ensuring ongoing compliance with requirements from laws, regulations, and global standards.Performs other duties and projects as assigned.Requirements: Demonstrates knowledge of, adherence to, monitoring and responsibility for compliance with state and federal regulations and laws as they pertain to this position.Demonstrates a knowledge of and experience of assessing and ensuring compliance with SOX Controls.Demonstrates basic understanding of U.S. privacy and data protection laws and regulations, fair information practices and core privacy and data protection principles, direct marketing techniques, workplace monitoring, financial privacy requirements, online privacy, and information security.Project management skills with the ability to manage multiple work streams.Relationship building skills and the ability to influence and communicate related concepts to technical and non-technical staff.Tactical thinking skills, creative problem solving, and analytical skills.Effective organizational and time management skills.Exceptional verbal, written and interpersonal communication skills.Ability to make informal and formal presentations, inside and outside the organization; speaking before assigned team or other groups as needed.Ability to deal with complex difficult problems involving multiple facets and variables in nonstandardized situations.Intermediate skills in computer terminal and personal computer operation; Microsoft Office applications including but not limited to: Word, Excel, PowerPoint and Outlook.Intermediate math skills; calculate interest and percentages; balance accounts; add, subtract, multiply and divide in all units of measure, using whole numbers, common fractions and decimals; locate routine mathematical errors; compute rate, ratio and percent, including the drafting and interpretation of bar graphs.Ability to make decisions that have moderate impact on the immediate work unit and cross functional departments.Ability to organize and prioritize work schedules on a short-term and long-term basis.Ability to work with little supervision while performing duties.Experience in the Mortgage industry preferred.Possible certifications preferences include: U.S. Certified Information Privacy Professional (CIPP/US), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA).Bachelor's Degree in information security, business administration, or related area preferred and a minimum of ten (10) + years' experience in one or more of the various privacy disciplines (e.g., policy, compliance, information security, operational risk management).Master's degree in an IT field preferred, particularly with an emphasis on cybersecurity.The Perks: Competitive compensation reliant on ability & experience.Excellent benefits package including multiple health, dental & vision options.Company paid life and AD&D Insurance, as well as additional voluntary benefit possibilities.401K with robust company match.15+ PTO days in addition to 8 paid company holidays.The opportunity to work for America's Lender under the vision of industry legend, Anthony Hsieh.We are an equal opportunity employer and value diversity in our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. #LI-SSPM17 PI135687557

Keywords: loanDepot, Lake Forest , IT Controls Engineer, Engineering , Lake Forest, California