IT Risk Manager

ROLE: IT Risk Manager

100% remote possible – Chicago preferred

September start date – 6 month contract, FTE possible

Heitmeyer Consulting is looking for an IT Risk Manager to support a global insurance client based in Chicago.

• Will be responsible for supporting the IT risk strategy and roadmap, implementing and/or enhancing capabilities, and managing ongoing operations.
• Will oversee continuous improvements to risk management practices and controls to ensure Information technology and cyber risks are effectively managed and mitigated.
• Will report directly to the Vice President of IT Risk Management.
  
  
  

Skills – must have:

• IT Audit / IT SOX – 6-10 years experience
• IT Risk Management
• ITGCs
• GRC – Governance, Risk and Compliance regulations (e.g., NY DFS, CCPA, GDPR, HIPAA)
• Enterprise risk and security frameworks including NIST, COBIT, ISO, CSA, ITIL, SCF preferred
• Data Privacy / Data Security
• Security Information and Event Management (SIEM)
• Strong communication – written & verbal
• Stakeholder management
• Leadership and teamwork
  
  
  

Skills – highly preferred:

• Financial institution / Insurance
• Big 4 background
• Relevant Certification(s) – e.g., CISO, CISM, CISSP, CRISC, CPA, CIA, Data Privacy
  
  
  

Role description:

• Manage the needs of IT risk management function and align to our client’s operating model and ERM framework.
• Continually enhance IT risk management roadmap focused on highest priority risks.
• Strengthen IT Risk Department Capabilities
• Define and maintain the IT control environment
• Document IT policies and procedures required to meet data security, audit, regulatory, and compliance requirements.
• Develop tools (GRC) to maintain IT Risk Register more efficiently and effectively.
• Regularly schedule IT risk assessment discussions with stakeholders.
• Continue the identification of Key Risk Indicators (KRIs).
• Assist the IT Key Risk Indicator Dashboard using data provided by stakeholders.
• Prepare materials for the IT Risk Steering Committee and facilitating quarterly meetings.
• Coordinate IT risk management activities with Enterprise Risk Management (ERM) team
• Assist in reviewing and enhancing policies and procedures.
• Manage internal / external audit requests and remediation efforts including IT SOX.
• Support corporate, regulatory, compliance and information security initiatives.
• Continuously identify emerging risks and design appropriate mitigation strategies.
• Manage aspects of System Development Lifecyle (SDLC) policy and integrating steps with PMO.
• Deliver a positive customer experience to all internal stakeholders.
  
  

Exciting opportunity to join a growing team where you can make a difference at a global insurance company!

Heitmeyer Consulting is an equal opportunity employer and we encourage all qualified candidates to apply. Qualified applicants will be considered without regard to minority status, gender, disability, veteran status or any other characteristic protected by law.