With more than $1B in revenue, Tennant Company is a globally recognized leader in the cleaning equipment industry. For the past 150 years, we have been passionate about developing and manufacturing innovative and sustainable solutions for our customers. At Tennant Company, we are committed to stewardship and creating a cleaner, safer and healthier world. With manufacturing, operations and sales, service, and support functions across the globe, your journey at Tennant can take you places you never expected.

Tennant Company's IT Quality team is responsible for IT Application Security, IT Testing, and IT Risk & Controls to build a strong 2nd line of defense alongside Tennant’s Cybersecurity and Compliance Teams. IT Risk & Controls is responsible for fostering an IT control aware culture, assisting teams with delivering compliant and secure technology capabilities, protecting customers, and meeting regulatory requirements. The IT Risk & Controls Analyst reports directly to the IT Risk & Controls Lead. In this role, we are looking for an individual who is able to assess and prioritize information technology risks across the organization, facilitate compliance with regulatory requirements and information security policies, and support the establishment and maintenance of effective IT general controls (ITGCs).

With the support of the IT Risk & Controls Lead, the IT Risk & Controls Analyst will collaborate with global process owners, internal auditors, external auditors, and other stakeholders to assist in reviewing, monitoring, and resolving technology-related findings. The IT Risk & Controls Analyst will also contribute to the company’s global IT compliance program.

Responsibilities

Assist in the development and implementation of IT risk management strategies, policies, and procedures including alignment to industry best practices and regulatory requirements
Manage access controls, including user provisioning, segregation of duties, and privileged access reviews.
Collaborate with business and IT stakeholders to support design and implementation of IT controls.
With the guidance of the IT Risk & Controls Lead, design and implement IT General Controls (ITGCs) to ensure logical security, change management, and IT operations controls compliance for on-premise and cloud-hosted technologies.
Oversee IT controls testing activities to ensure operating effectiveness and compliance with various regulations, including but not limited to Sarbanes-Oxley (SOX).
Evaluate service organization control reports (SOC 1, SOC 2, ISAE 3402, etc.) for deficiencies identified by service auditor and complementary user entity controls (CUECs) required to be implemented by Management.
Help the IT Risk & Controls Lead monitor and report on the effectiveness of IT controls, areas for improvement, and corrective actions underway to Senior IT Leadership.
With the support of the IT Risk & Controls Lead, assess IT deficiencies for root cause, severity, compensating controls, and IT corrective action plans.
Provide guidance and training to Management on IT risk management, ITGCs, among other topics.
Collaborate with various internal and external auditors regarding the submission of requests by IT stakeholders for SOX, ISO, ESG, and Audit & Advisory projects.

Required Experience And Qualifications

Bachelor’s degree in management information systems, computer science, or similar field(s).
Minimum 0-3 years of combined audit, technology, and IT risk experience.
Demonstrated knowledge of risk management, information technology, and/or auditing.
Demonstrated time management skills using time effectively to meet deadlines.
Demonstrated aptitude for continuous learning in and around technology acumen, analytical problem-solving, and interpersonal skills.
Demonstrated ability to prioritize and manage multiple workstreams including administrative and documentation-oriented tasks.
Applicants must be authorized to work legally in the United States in order to be considered for employment with Tennant. Tennant is unable to sponsor or take over sponsorship of an employment Visa for this position.

Preferred Experience

Professional certification such as, CISA, CISM, CRISC, CGEIT, CISSP, or similar is recommended or must be in the job candidate’s future plan to obtain.
Knowledge of information technology and risk frameworks (e.g., COBIT, SOC Reports (SSAE 18), NIST, ITIL, COSO, or similar).
Experience designing and/or testing IT general controls (ITGCs) and System Development Life Cycle (SDLC) controls.
Experience with SAP and other ERPs.
Experience with various operating systems, databases, platforms, network software and hardware, security tools, and cloud services.
Knowledge of Sarbanes-Oxley (SOX) IT controls requirements and testing methodology.
Experience building process flow design documents using tools like Visio.
Manufacturing industry experience.

Begin your journey with us. Let's reinvent how the world cleans.

Equal Opportunity Employer

Tennant Company is an equal opportunity employer. Employment decisions are made on the basis of individual skill, ability, reliability, productivity, and other factors important to performance. We do not discriminate on the basis of race, color, religion, sex, national origin, physical or mental disability, age, military service, pregnancy, sexual orientation, genetic information (including family medical history), marital status, gender identity or expression, parental status, political or any other non-merit based factors protected by state or federal law or local ordinance.

Tennant Company jobs

IT Risk & Controls Analyst