Job details
Salary $85,000 - $170,000 a year job type full-time
Full job description
Job description:
Role summary/purpose:
The vp, iam risk management leader will be responsible for developing, executing, controlling, and reporting out in the following areas: identity and access management (iam) policy (policies, standards, & procedures) and iam domain risk management, which will include: issue management, risk acceptances and decision management, response management - audits, targeted reviews, regulatory exams, compliance, and assessments (nist csf, nist fs-profile, and the ffiec cybersecurity assessment tool), process rcsas, risk exception management, kri/kpi creation and oversight and assurance, monitoring of controls identified in prcsa or standard framework assessments.
In this role, the individual will be responsible for overall management of iam standards, execute gap identification and remediation, and will facilitate cross-functional support of iam, it and business teams in gathering evidence and leading responses to audits, assessments, reviews, compliance, and regulatory examsA large aspect of the role is to establish key relationships and facilitate responses with the technology risk management (trm), information security (is), information technology (it), 2nd line (orm), 3rd line (internal audit), external audit/consulting teams, and individual business lines or project teams as required.
This position is remote, where you have the option to work from homeOn occasion we may request for you to commute to our nearest office for in person engagement activities such as team meetings, training and culture eventsWe’re proud to offer you choice and flexibility.
Essential responsibilities:
Manage risk management activities across iam organization
Review existing and proposed policies with stakeholders
Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy
Assess policy needs and collaborate with stakeholders to develop policies to govern iam activities
Recommend policy and coordinate review and approvals
Identify organizational policy stakeholders and seek consensus on proposed policy changes from stakeholders
Provide policy guidance to iam management, staff, and users
Maintain knowledge of applicable iam policies, regulations, and compliance documents specifically related to iam auditing
Assure successful implementation and functionality of security requirements and appropriate information technology (it) policies and procedures that are consistent with the organization`s mission and goals
Identify and assess information & technology risk, security and compliance requirements
Analyze iam risk posture and contribute to risk based strategic planning; perform comprehensive review, design, and/or implement mitigation strategies (including remediation) to improve the organization’s risk profile.
Manage risk, meeting local and global regulatory, security and business requirements, and maintaining the highest standards for quality, compliance and accountability
Maintain current knowledge of best practices and current procedures, and frameworks
Lead cross-functional team members during audits, assessments, and reviews through response/follow-up and closure, including documenting findings, action items and evidence collection
Work across iam leadership, internal audit, information technology, information security, operational risk management, other technology stakeholders and facilitate risk management related deliverables.
Facilitate updates to open issues across the organization (i.eIs, it, trm, orm, ia, etc.)
Work/track findings and issues (bsii’s, 2l, internal audit) to closure and provide routine reporting to the is risk governance & response management leader and senior managementWork with risk management technologies, keylight and egrc.
Lead iam risk management activities, including risk and control assessments, risk acceptance, risk treatment, issue documentation and issue closure activities.
Regularly report out the current status of all risk management deliverables, including issues, audits and assessments
Incorporate knowledge of regulatory frameworks ffiec, nist, fs profile, ucf into work products and recommendations
Perform other duties and/or special projects as assigned
Qualifications/requirements:
Bachelor`s degree and a minimum 5 years of information technology experience or, in lieu of bachelor’s degree, a high school diploma/ged and a minimum of 9 years of information technology experience preferred
Minimum 5 years knowledge of organizational security policies
4-5 years ability to interpret and apply laws, regulations, policies, and guidance relevant to organization cyber objectives
7 years’ experience in financial services risk management preferred
7 years knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
5 years knowledge of security assessment and authorization process
Desired characteristics:
Strong executive presence and communication/presentation skills
Proven analytical mindset; ability to identify patterns or correlation within data sets
Critical attention to detail; ability to coordinate multiple deliverables across multiple teams
Ability to work in a matrixed organization with multiple stakeholders
Ms office skills: excel and powerpoint
Strong work experience in iam, audit/compliance and/or risk management
Direct experience in with risk management software (e.gKeylight, bwise or equivalent)
Knowledge of the organization’s enterprise technology goals and objectives
Knowledge of the organization`s core business/mission processes
Knowledge of personally identifiable information (pii) data security standards
Knowledge of payment card industry (pci) data security standards
Knowledge of laws, policies, procedures, or governance relevant to cybersecurity for critical infrastructures
Knowledge of cyber defense and information security policies, procedures, and regulations
Knowledge of information technology (it) risk management policies, requirements, and procedures
Skill in creating policies that reflect system security objectives
Ability to exercise judgment when policies are not well-defined
Understands how information security and technology works end-to-end and the impact of advice/consultation and/or solutions across the customer’s enterprise
Excellent consulting skills and superior ability to develop and maintain effective relationships
Strong knowledge of ms office products
Capable of working independently or in group setting
Highly analytical, detail-oriented, and strong problem solving with a common-sense approach to resolving problems
Expertise to clearly define complex issues despite incomplete or ambiguous information
Strong oral and written communications skills
Strong interpersonal and critical thinking skills
Excellent communication and relationship building skills
Expert knowledge of risk management
Strong analytical skills
Strong project management skills
Eligibility requirements:
You must be 18 years or older
You must have a high school diploma or equivalent
You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process
You must be able to satisfy the requirements of section 19 of the federal deposit insurance act.
New hires (level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other rolesOnce this new hire time in position requirement is met, the associate will have a minimum 6 months’ time in position before they can post for future non-exempt rolesEmployees, level 8 or greater, must have at least 24 months’ time in position before they can postAll internal employees must have at least a “consistently meets expectations” performance rating and have approval from your manager to post (or the approval of your manager and hr if you don’t meet the time in position or performance requirement).
Legal authorization to work in the u.sIs requiredWe will not sponsor individuals for employment visas, now or in the future, for this job opening.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Reasonable accommodation notice:
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilitiesPlease tell us if you require a reasonable accommodation to apply for a job or to perform your jobExamples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
If you need special accommodations, please call our career support line so that we can discuss your specific situationWe can be reached at 1-866-301-5627Representatives are available from 8am – 5pm monday to friday, central standard time.
The salary range for this position is 85,000.00 - 170,000.00 usd annual
Salaries are adjusted according to market in ca and metro ny and some positions are bonus eligible.
Grade/level: 12
Job family group:
Information technology
