About Us:

Stericycle is a U.S. based business-to-business services company and leading provider of compliance-based solutions that protect people and brands, promote health and well-being, and safeguard the environment. Since our founding over 30 years ago, we have grown from a small start-up in medical waste management into a leader across a range of increasingly complex and highly regulated arenas, serving healthcare organizations and commercial businesses of every size.

Position Purpose:

Risk & Compliance is adherence to industry, governmental, corporate, and third-party control requirements and assessing risk factors within the IT environment. This position works with the IT Risk & Compliance Manager to align with requirements and ensure compliance with industry acceptable standards. This role will also maintain low to mid complexity internal controls and identify technical compliance gaps and assist Stericycle teams in building remedial actions to address enterprise compliance gaps. This position is hybrid to Bannockburn, IL (Near Chicago, IL) You will be working on-site Tuesday, Wednesday and Thursday each week.

Key Job Activities:

• Help ensure compliance with SOX and other regulatory/compliance for Stericycle Business Units including executing IT-related review procedures for SOX, including ITGCs, ITACs, Key report testing, and SDLC
• Participate in Business Process and IT-related projects, including providing recommendations that improve internal processes and performances
• Support control owners through the entire management of the IT SOX audit cycle, including assisting control owners through continuous improvement of controls, maintaining the IT SOX control framework, facilitating prep sessions, and helping to validate that audit evidence is complete and accurate before providing it to the auditors
• Assists with completing the quarterly User Entitlement Review (UER) audit process
• Review weekly and quarterly reporting of Business Process and IT Segregation of Duties (SOD) and sensitive access (SA) activities from SAP GRC to meet applicable compliance
• Work closely with the SAP Security team to ensure compliance with the SAP GRC SOD and sensitive access Guiding Principles
• Assist with maintaining SOD/SA rule sets and risks in SAP GRC AC & reviewing access requests in SAP GRC
• Create effective remediation plans and enhancements for internal controls such as segregation of duties, change management, access management, IT operations, workflow, application configuration, etc
• Receive and manage low to mid-level complex compliance issues through investigation, consulting with appropriate owners, and resolution or mitigation strategy
• Work with Internal Audit and other Business Units to remediate new and outstanding issues.
• Investigate issues and/or reporting and escalate to Audit and Compliance stakeholders for internal or external audit actions when needed
• Update and maintain control matrices and spreadsheets, providing recommendations for management’s consideration
• Perform other duties and responsibilities as assigned

Education:

Experience (North America):

• Bachelor’s degree in Information Technology, Accounting, Finance or General Business or the equivalent in related experience
• 2+ years of experience in a fast-paced professional role.
• Previous audit, controls, process and/or IT audit is preferred, not required
• SAP functional knowledge is preferred, not required
• Intermediate analytical and critical thinking skills.
• Professional certifications such as CISA, CRISC, CIA, CPA is preferred, not required
• Intermediate to advanced level skills using Microsoft office products including Word, PowerPoint, and Excel
• Good business acumen and process-oriented thinking
• Strong communication and written skills - Demonstrates the ability to present ideas and information in a clear, concise, organized, and diplomatic manner; listen to others to respond effectively to ideas and questions.
• Deals openly and honestly with people in all levels of the organization while building credibility and maintaining trust. Exhibits empathy and sensitivity for the needs of others. Is perceived by others as being helpful and supportive.
• Demonstrates the ability to be a self-starter who can utilize strong problem-solving skills to generate creative solutions to complex issues.
• Demonstrate the ability to deal with changing priorities and multi-task several projects with the ability to succeed well under pressure, grasp new ideas quickly. Possess an “all in” attitude and embrace the ability to be part of a High-Performance team, focusing on adapting and overcoming obstacles.
• Demonstrate the ability to generate new ideas; recognize the need for and develop new approaches to problem resolution.
• Demonstrate the ability to efficiently manage own time, activities and resources. Identify specific activities required to accomplish objectives and take action to achieve desired results; prioritize complex multiple activities and projects.

Benefits:

Stericycle currently offers its employees the option to participate in a full range of benefits, including a health care program which includes medical, dental, vision and prescription coverage, healthcare and dependent care flexible spending accounts, life and accidental death and dismemberment insurance, an employee assistance program, tuition reimbursement, paid vacation and sick time, a 401(k) plan, and an employee stock purchase plan. Participation in some programs requires that employees be regularly scheduled to work a minimum number of hours and/or to have fulfilled a waiting period after they begin employment with Stericycle.

Disclaimer:

The above description is meant to provide a summary of the nature and level of work being performed; it should not be construed as an exhaustive list of all responsibilities, duties and requirements of the job. This document does not create an employment contract, implied or otherwise. Stericycle will consider requests for workplace accommodations for protected physical or mental limitations in accordance with its human resources policies and local laws. To the extent permissible under local law, and consistent with business necessity, Stericycle reserves the right to modify the content formally or informally, either verbally or in writing, at any time with or without advance notice.