IT Business Analyst/GRC Analyst/Risk Analyst/IT Governance Analyst

Job Description: AIT (Inventory Management System) Management

• Queue Management of Technical and Information Security deliverables

• Not Permitted Technology (NPT) Target Dates & Date Modifications

• P2/P3 Compliance, Patch scheduling and CM verifications

• Risk Management - Documentation of the Risk and remediation or compensation controls

• Access request approvals and reviews

• Firewall request approvals and reviews

• Change Management request approvals and reviews

• Service ID Management and Attestations

• Work with AIT SMEs

• Strong communication and follow-up skills

• Break Fix communication follow-up

• Decommissioning and Creation of AITs

• Significant Change Assessment & Approvals

• Access Business Rule Engine Management

• Violation, eligibility, toxic combinations & exceptions

• Communication with AIT Engineering teams

• Trident Survey (GIS) Responses and Attestations

• Dormancy Management (Use it or Lose It)

• Point of Contact for any requests or inquiries regarding AIT

Enterprise Critical Infrastructure (ECI) Team Librarian 

• Ensuring all ECI Program-required documents-Restoral Plans, Restoral Test Plans, Restoral Test Execution Plans-are stored in the required repositories:

• FileNet

• FORP (with uploads performed by the ECI FORP Administrator)

• Team NFS

• Managing access permissions for all ECI documents across these repositories

• Coordinating and overseeing required quarterly FORP testing and managing the ECI teams FORP user population

• Yearly documentation reviews of below information within the ECI documentation

1. ECI recovery support contacts (including vendors)

2. ECI Inventory (Hosts and VMs)

3. ECI AITs (currently 7)

Necessary training and guidance from IOR Strategy and Governance to perform these functions.