
The Area: The Information Security department is responsible for setting enterprise security policies and standards designed to protect the confidentiality, integrity, and availability of Morningstar information. The team provides guidance and technical expertise in application security, policies and procedures, disaster recovery, and compliance/regulation. They analyze emerging threats and conduct risk and vulnerability assessments to secure information.
The Role: The IT Risk and Compliance Analyst will support compliance-related responsibilities, document security processes, ensure compliance obligations are met, identify and follow up on security findings, gather audit evidence, conduct 3rd party vendor risk assessments, and respond to customer RFPs and due diligence questionnaires.
Morningstar offers a hybrid work environment with opportunities to work remotely and collaborate in-person three days each week along with various benefits for flexibility and global engagement.