Technology Risk Manager

Information security risk management experienceAble to translate complex technical information for Business stakeholders to consume.Key Accountabilities
MUST HAVE
Cyber security experienceInformation security risk management experienceAble to translate complex technical information for Business stakeholders to consume.NICE TO HAVE
Security ArchitectureCUSTOMER
Provide consultation and advice to partners on a broad range Technology Controls / Information Security programs / policies / standards and incidents for own specialized areaConduct project consulting on assessment of risk, definition of required controls, appropriateness of implemented control procedures, vulnerability assessments and any other relevant areasLead or contribute to completion of risk and control design assessments for an application portfolio, articulate and document impact of control gaps to the business and the overall Bank, risk mitigation and remediation plans, remediation strategy document as applicableContribute to the definition, development, oversight, and advancement of a global security management strategy and frameworkEnsure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology / security threatsDevelop on-going Technology Risk reporting, monitoring key trends and defining metrics to regularly measure control effectiveness for own areaWork proactively with technology partners / stakeholders and service/platform owners to ensure all technology security components are integrated into the banks overall Enterprise Architecture, and any control gaps are addressed effectively and efficiently.Consult on Regulatory compliance requirements, reporting and questionsProvide support and consulting in preparation for Audits and in composing management responses and appropriate remediation activitiesParticipate in computer security incident responses relevant to business (or enterprise wide) and represent respective function and Enterprise position to the business, and business needs to incident response teamSHAREHOLDER
Adhere to internal policies / procedures, technology control standards, and applicable regulatory guidelinesContribute to the review of internal processes and activities and assist in identifying potential opportunities for improvementAdhere to and advise on / oversee / monitor / enforce enterprise frameworks and methodologies that relate to technology controls / information security activitiesInfluence behavior to reduce risk and foster a strong technology risk management culture throughout the enterpriseRemain informed of emerging issues, industry trends and/or relevant changesDefine / develop / implement / manage standards, policies, procedures, and solutions that mitigate risk and maximize security, availability of service, efficiency and effectivenessActively manage relationships with other areas of Technology / businesses / corporate and/or control functions and ensure alignment with enterprise and/or regulatory requirementsKeep abreast of emerging issues, trends, and evolving regulatory requirements and assess potential impacts to the BankAssess / identify key issues and elevate to appropriate levels and relevant stakeholders where requiredMaintain a culture of risk management and control, supported by effective processes and sound infrastructure an in alignment with risk appetiteParticipate in business specific / cross-functional / enterprise initiatives as a subject matter expert helping to identify risk / provide guidanceMay develop / provide / contribute to complex reporting, analysis, and assessments at the functional or enterprise levelEMPLOYEE / TEAM
Keep current on emerging trends / developments and grow knowledge of the business, analytical tools and techniquesPrioritize and manage own workload to deliver quality results and meet assigned timelinesSupport a positive work environment that promotes service to the business, quality, innovation and teamwork and ensure timely communication of issues/ points of interestIdentify and recommend opportunities to enhance productivity, effectiveness and operational efficiencyEstablish effective relationships across multiple business and technology partners, program and project managersParticipate in knowledge transfer within the team and business unitsBREADTH & DEPTH
Advanced knowledge of of organization, technology controls / security/ risk issuesMay participate on complex, comprehensive or large projects and initiativesActs as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendorsHybrid: In office 2 days a week#J-18808-Ljbffr