Data Analyst, Pomona

Job Title: Data Analyst III

Remote is Okay but should be on these locations.

Note: this is likely C2H if the consultant is located in a state where Xcel provides services- MN, CO, TX, CO, MI, NM, ND, SD, WI.

Thx EMD

Location: The position requires 2-3 days per week in the office but is open to any office/location. The resource does not immediately have to report to the office but may be required to travel quarterly for group meetings. Fully remote work is possible if the resource is productive.

Job Details:

The Data Analyst III will work under the Director of Identity and Access Management within the security team. The role involves managing access controls and providing evidence of their effectiveness. This includes handling identity data from SailPoint and CyberArk systems, user accounts, application-level access, and entitlements within those applications. The analyst will focus on SOX applications, which are related to Sarbanes-Oxley financial reporting and require restricted access. The role is significant due to the potential fines and reputational damage associated with the work. The analyst will learn about SOX controls, CIP controls related to the electric grid, FERC controls, and TSA controls related to Homeland Security. This position requires a serious and accomplished data analyst with audit experience, compliance understanding, and a security mindset. It is a temp-to-perm role, seeking the right personality, skills, aptitude, attitude, and regulatory knowledge.

A typical day involves managing disruptions from compliance-related questions, maintaining a customer service attitude, and handling quarterly access certifications using SailPoint 8.4. The analyst will manage 10,000 different entitlements, configure and launch access reviews, and chase down approvals. After certification campaigns, the analyst will analyze evidence from 19 different SOX applications to ensure controls are effective. Daily tasks include responding to ad hoc questions from managers, following up on annual CIP training requirements, and innovating and improving controls and data management processes to automate reporting and analysis.

The position supports a team consisting of the Senior Security Compliance and Security Engineer, auditors, control owners, SOX PMO, and other owners of access controls and application teams. The team is part of shared services supporting all of Xcel Energy. The immediate team includes the Senior Security Compliance and Security Engineer and two others, with additional support from four people in the SOX office and two in audit services, making a regular community of 5-10 people.

To be proficient, the analyst should have regulatory environment experience and some level of compliance experience. It is expected to take about one year to become proficient and capable of carrying out responsibilities.

Candidate Details

What are the top 3-5 skills and qualifications (technology/application/software, etc.) required? The ideal candidate should have 8-10 years of experience, audit assurance/risk management experience, SOX experience and understanding, and data expertise. Fluency in Excel, capabilities in SQL, business objects, and the ability to learn new reporting platforms are essential. SailPoint experience is a plus. The candidate should recognize databases and navigate these systems effectively. A degree is not mandatory; commensurate experience is acceptable.

The ideal candidate background includes titles such as Compliance Analyst, IAM Consultant, or Engineer, with a security background. The candidate should have security, IAM, and data expertise, etc.

Are there any specific companies you like to see on a candidate's resume? Experience in regulated environments such as medical, banking, or utilities is preferred.

No specific certifications are required, but relevant certifications in audit, compliance, or risk management are considered valuable.