Information security risk manager – marsh inc.
Location: remote - usa
Marsh incIs seeking an information security manager who will serve as an individual contributor working closely with a wide range of audiences, from fellow information security colleagues to privacy, compliance, legal and hr representatives, it colleagues, business partners, vendors and clients to meet it security objectives.
What is in it for you?
Career growth in a company where performance is rewarded with new opportunities
The estimated salary range for this role is from $140,000 to $150,000 with the final salary being determined on an individual basis taking into consideration factors such as:
Candidate’s experience
Candidate’s education
Any additional certifications/credentials
We are excited to offer the following benefits to all of our colleagues: - health and welfare benefits - tuition assistance - 401k and other retirement savings programs - employee assistance programs – physical, mental and financial.
We will count on you to:
Manage the information security risk including vulnerability management, vendor risk, and areas such as regulatory and compliance risk including new york division of financial services cybersecurity regulations.
Develop risk mitigation tactics and coordinate their execution across a global organizationIn addition, the candidate should
Manage basic vendor risks and manage associated risks
What you need to have:
A bachelor’s degree in a related discipline
At least at least 8-10 years in information security
Vulnerability management experience including network and web application vulnerabilities in a global organization including reporting and remediation tracking
Experience deploying enterprise application security testing tools (sast, dast, open source, etc), solutions and in ci/cd, agile, and waterfall environments
Working knowledge in all areas of technology (infrastructure, applications, sdlc, end-user platforms and soc operations)
Familiarity with siem concepts, dlp technologies, firewalls, and other perimeter protections
General experience working with cloud technologies such as aws and or azure
Advanced interpersonal verbal and written communications skills in a global environment
A drive to be aware of the current threat landscape and the future direction while learning new technologies and controls to address
Preferred to have:
Strong program management experience leading and executing on global enterprise-wide
Experience with cloud-centric controls including securing data in the cloud (aws, azure) and working with cloud-native applications
Experience with security program assessments, reviews and remediation
Experience with regulations, frameworks, and governance models: gdpr, nydfs, ccpa, pci, nist csf, iso 27002, soc 2 type ii, etc.
Nice to have:
Experience in scripting, and automation (devsecops)
Cissp or cism certificationAws or azure cloud security certifications
Experience with designing secure data lake architectures, data stores, user interfaces, and foundational unified analytics platforms
Client facing experience and presence, change agent, and broad understanding of security solutions
Experience using dashboarding and data management tools to analyze large volumes of data
System administration (windows or linux) experience, penetration testing, information security engineer experience including common security tools
Vendor and third-party risk management experience and client questionnaire response
Marsh is a global leader in insurance broking and risk managementIn more than 130 countries, our experts in every facet of risk and across industries help clients to anticipate, quantify, and more fully understand the range of risks they faceWe work with clients of all sizes to define, design, and deliver innovative solutions to better quantify and manage riskWe offer risk management, risk consulting, insurance broking, alternative risk financing, and insurance program management services to businesses, government entities, organizations, and individuals around the worldTo every client interaction we bring an unmatched combination of deep intellectual capital, industry-specific expertise, global experience, and collaborationSince 1871, clients have relied on marsh for trusted advice, to represent their interests in the marketplace, make sense of an increasingly complex world, and help turn risks into new opportunities for growthOur more than 30,000 colleagues work on behalf of our clients, who are enterprises of all sizes in every industry, and include individuals, multinational organizations, and government entities worldwideWe embrace a culture that celebrates and promotes the many backgrounds, heritages and perspectives of our colleagues and clientsVisit www.marsh.com for more information and follow us on linkedin and twitter @marshglobal
Marsh and its separately incorporated operating entities around the world are part of marsh & mclennan companies, a publicly held company (ticker symbol: mmc).
Marsh & mclennan companies offers competitive salaries and comprehensive benefits and programs including health and welfare, tuition assistance, 401k, employee assistance program, domestic partnership benefits, career mobility, employee network groups, volunteer opportunities, and other programsFor more information about our company, please visit us at http://www.mmc.com/.
We embrace a culture that celebrates and promotes the many backgrounds, heritages and perspectives of our colleagues and clientsFor more information, please visit us at www.mmc.com/diversity.
Affiliates are eoe minority/female/disability/vet/sexual orientation/gender identity employers.
If you are interested in submitting you application for this opportunity, click apply and follow the steps outlined on each pageOver the course of the application, you will be asked upload a resume, provide
