Specialist - IT Governance & Risk

Overview

At Brookfield Properties, our success starts with our people. People like you.

We develop, operate, and manage more than 650 properties and 325 million square feet of real estate across the globe. It's a feat that wouldn't be possible without our team, a diverse group of creative visionaries and innovative experts who are relentless in pursuit of one goal: to ensure our buildings don't simply meet the needs of our tenants, residents, and communities - but exceed them, every day.

Overview

The IT Risk & Compliance Analyst is responsible for understanding, evaluating, and assessing complex systems, security controls and standards throughout the Brookfield Properties organization. This role will also be supporting management on various regulatory audit/compliance engagements and activates. In addition, this role will ensure the company is compliant with regulatory requirements and security best practices as defined by industry experts and Brookfield Properties policies and standards. This position is responsible for handling highly sensitive and confidential information.

Qualifications

• This position requires an Undergraduate (Bachelor) Degree - preferably in Business or Information Technology. 5-7 years of experience can offset minimum educational requirements for this position.
• Relevant certifications are strongly preferred: CISSP,CISA,CRISC, etc.
• 3-4 years of experience is required in:
• IT risk management, IT compliance, internal audit, project management, and/or information security.
• NIST framework, specifically as applied to risk management.
• IT SOX General Controls, Change Management and SDLC Processes.
• Ability to navigate complex corporate structures and areas concerning legal and regulatory mandates, risk and compliance.
• Ability to work both independently with sole responsibility, as part of a team.
• Professional cyber security experience.
• General knowledge of computer systems, networks, telecommunication, internet, intranet and extranet technologies; strong technical acumen: application and operating system hardening, vulnerability assessments, security audits; ability to weigh business risks and enforce appropriate information security measures; excellent documentation and presentation skills; ability to explain information security concepts to audiences outside of the field.
• Security designations (CISSP, CISA,) and knowledge of 'best practice' frameworks (COBIT, NIST CSF, NIST 800-53, ISO27001) are preferred but not required.
• Ability to evaluate business processes and IT technology, identify risks, process gaps, and evaluate controls.
• Knowledge of CCPA, SOX and other data regulations and standards.
• Extensive knowledge of data security and access control systems, and related matters.
• Extensive knowledge of information protection methodologies and concepts, such as identification and authentication, access control, inception and audit trails.
• Required skills for this position include:
• Written Communications
• Process Improvement
• Interpersonal Skills
• Travel up to 10% of the time; rarely travel