IT RISK CONTROL OFFICER, Director

-  Working with risk control and other members of the Information Security and IT Risk team to evaluate overall security posture associated with third party relationships, new product offerings and our branch environment. 

-  Provides security risk evaluation and advisory services to the business.  Also responsible for the escalation and monitoring of associated remediation issues.

-  Serves as first point of contact within the team for the following departments and processes: Policy Development, New Business, Sourcing, Products and Services, Division Risk Officer, Marketing Technology, Legal, and when applicable, Branch Management

-  Execution of risk evaluation processes for new relationships with third parties to ensure third party relationships are contracted within set security parameters

-  Serves as first point of contact for external and internal security and IT Risk reviews for WM-US and WMI North American locations

-  Responsible for understanding and serving as main point of contact for Privacy requirements as related to information security and IT Risk

-  Responsible for working with the IT Risk Program Manager to develop and deliver content regarding information security topics to internal personnel

-  Serves as information security and IT Risk lead during regulatory reviews of the information security program and posture

-  Also responsible for supporting the Information Security and IT Risk team in completing various risk assessments throughout the environment.  Risk assessments requirements include evaluation and documentation of information security and IT Risks, as well as the monitoring and escalation of any risk issues not resolved prior to production rollout.  Risk assessment support may be for new business relationships, infrastructure/application considerations, or adjustments in business processes that may affect the Firm?s overall security posture.

-  Reports to the Chief Information Security Officer

 

-  BS/BA in Business, Information Technology or related education/experience

-  Financial Services, Big Four or Consulting Background Preferred

-  Minimum of 5 years Information Technology or Information Security experience

-  Strong understanding of Information Security policies/best practices, as well as associated regulatory and outside agency requirements

-  Some knowledge of networking technologies (routers, firewalls, key protocols), major operating systems (Windows, UNIX, Mainframe), security technologies (i.e., intrusion detection, firewalls, directory management), and major security processes (i.e., user account management, incident response, application development) required.

-  Excellent verbal and written communication skills

-  Strong interpersonal and presentation skills

-  Strong organizational skills and project management experience

-  Demonstrated ability to influence clients, team members, management and external groups

-  Demonstrated ability to build consensus among diverse constituencies

-  Ability to work autonomously to deliver results on objectives set by management

 

If qualified, please submit a Word Version Resume to: Jennifer@altaassociates.com