Manage end to end tech and cyber risk management – from defining policies and procedures, performing assessments, tracking remediation activities, to closing risk findings

Rationalize tech and cyber controls focusing on key risks and alignment with technology processes

Influence updates to policies, standards, control description to enhance risk management activities

Drive projects based on defined priorities; ensure scope of deliverables and timelines 

Partner with project customers to provide risk and controls thought partnership to devise effective risk identification and mitigation strategies

Forge relationships with key stakeholders to ensure delivery of commitments

Identify ways to improve and streamline risk identification, assessment, and mitigation processes

Exhibit a proven track record of project management, bringing the ability to quickly put structure in place to manage the work

Demonstrate outstanding communication and partnership skills which are essential for interacting and communicating with key stakeholders across all levels to manage, inform, and influence outcomes

Demonstrate organizational agility to adapt to changing demands

Display strong consulting and collaboration skills

Promote strategic vision and execute tactical operations to implement overarching risk assessment and risk management programs

Partner with Cyber and other Risk Management functions across the company

Interact with business counterparts and other IT colleagues to ensure appropriate coverage of shared controls and/or shared processes

Proactively engage team members and project leads to ensure that system changes or enhancements consider Audit controls and IT standards before implementation

Create and disseminate reporting and metrics related to the risk environment to key stakeholders and leadership

Meet professional obligations through efficient work habits such as meeting deadlines, honoring schedules, coordinating resources and meetings in an effective and timely manner, and demonstrating respect for others

Point of contact for compliance and audit engagements

Prepare for, coordinate, and respond to internal and external audits

Identify opportunities and work with business stakeholders and partners to embed risk management practices into the daily operations and business processes across the organization

At least 3 years of experience in Cybersecurity, Technology, Audit, or Risk Management 

At least 2 years of People Management experience

Cybersecurity and technology risk certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM) or related certifications

Experience in a Large Financial Services or Big4 consulting organization