Senior Risk Manager

Overview

Permanent position focused on information security governance, risk, and compliance to protect information assets.

Responsibilities

• Identify risks associated with protecting information assets
• Collaborate with and support departments from an information security perspective
• Monitor compliance with policies
• Ensure data privacy is being adhered to
• Implement security controls and solutions according to security governance requirements
• Set a risk tolerance level that protects information assets and enables business operations to run as smoothly as possible
• Conduct threat and risk assessments as necessary and review the results
• Review, manage, and update risk-related processes, procedures, controls, and supporting documents
• Ensure that the information security governance framework and strategy align with the organization’s general risk governance program
• Track and record information security risks, detailing if the risk is accepted, not accepted, mitigated, or transferred
• Identify, assess, and monitor risks to information security and propose mitigation strategies
• Evaluate the inherent risk of identified threats and calculate residual risk after mitigation techniques have been implemented
• Build a cybersecurity process risk & control framework aligned with applicable laws and standards
• Conduct industry standard (e.g., PCI-DSS) and data privacy compliance readiness assessments
• Establish IT security policies, standards, and procedures
• Manage IT security training & awareness program
• Establish IT security functions metrics and reporting for various levels of audiences
• Build the risk and compliance programs and roadmap
• Implement the necessary GRC tools
• Perform other IT security tasks as deemed necessary

Qualifications

#J-18808-Ljbffr