IT Controls Process Analyst

(Reference code: 0006PC) Status: Full Time, Employee Location: Northbrook, IL 60062 Job Category: IT/Software Development Career Level:Experienced (Non-Manager) Education Level: Bachelor's Degree Job Description: The Allstate Corporation is the nation’s largest publicly held personal lines insurer. A Fortune 100 company, with $156 billion in assets, Allstate sells 13 major lines of insurance, including auto, property, life and commercial. Allstate also offers retirement and investment products and banking services. Allstate is widely known through the “You’re In Good Hands With Allstate®â€� slogan. Allstate was founded in 1931 and became a publicly traded company in 1993. The Allstate Technology and Operations (ATO) Compliance team's mission is to integrate IT controls into ATO processes enabling compliance to laws and regulations, reliable financial reporting, and protection of assets. Major responsibilities of team include: overall IT controls governance for ATO, coordination of ATO's Sarbanes-Oxley compliance effort, and management of enterprise-wide information security projects impacting ATO. IT Controls (SOX) Process Analyst - Analyzes, designs, develops, consults on and implements or reengineers processes, techniques, and tools relating to IT controls within Allstate Protection  Technology in support of operational excellence. The responsibilities specific to this IT Controls (SOX) Process Analyst position include: Performs IT controls reviews of ATO areas and/or projects. Analyzes IT control processes, identifies issues, and root causes.  Assesses compliance to IT control standards in support of legal, regulatory, and corporate requirements and may also evaluate IT control processes against best practices.  Depending on level of experience, may plan and/or lead IT controls reviews. Examples of potential assignments include:  Review and evaluate Sarbanes-Oxley (SOX) compliance efforts within multiple areas of ATO; assess compliance to non-SOX IT control standards (e.g. information security, privacy, and other); develop and align IT control process improvement initiatives with other software quality initiatives (such as the Capability Maturity Model (CMM); ITIL); facilitate resolution of audit or SOX issues, and more.  Bachelor's Degree in an Information Technology-related field or Business-related field with technical training preferred. Prefer 3-5 years experience planning and performing IT or integrated audits.  Prior experience with Sarbanes-Oxley legislation and controls considered a plus.  Knowledge of and/or experience with the following would be considered a plus: Systems Development Life Cycle (SDLC) Auditing Process Development Control Objectives for Information and Related Technology (CobiT) Capability Maturity Model (CMM) "Big Four" Public Accounting. Internal Consulting Must be proactive and a self-starter.  Must be able to work independently or as part of a team as needed.  The ideal candidate would have the ability to take a problem (IT controls project) with no clear solution and manage/work from concept through implementation, the solution should effectively address the root cause. Required:  MS-Word, MS-Excel, MS-PowerPoint, and MS-Outlook. Required:  Strong verbal and written communication skills. Preferred:  CISA, CIA, CISSP, and/or PMP. Preferred:  MS-Project, Visio, CaseWise.