What are the responsibilities and job description for the IT Risk Program Lead position at Lineage?
The IT Risk and Compliance Program Manager is charged with leading in the identification, assessment, measurement, monitoring, and reporting of IT risk through Lineage Logistics’ technology risk and cyber security program. This role’s primary function will involve supporting the company’s information technology general controls (ITGC) program. In addition, this role may be called on to support corporate operations and technology compliance audits, vendor / partner risk assessments, M&A due diligence or support customer assurance efforts as needs, and interests require. This role will also support security awareness and education efforts delivered to company employees and relevant parties.
The ideal candidate will understand current IT compliance frameworks, technologies, and processes while being continuously on the lookout for innovative and flexible ways to automate processes that support a fast-paced, secure, and empowered environment.
KEY DUTIES AND RESPONSIBILTIES
This role covers audit, compliance, vendor risk, and customer assurance functions in the context of cyber security within technology operational areas such as:
This is an excellent position to begin your career path within Lineage! Success in this role enables greater responsibilities and promotions! A career at Lineage starts with learning about our business and how each team member plays a part each and every day to satisfy our customers’ requirements. Beyond that, you’ll help us grow and learn on our journey to be the very best employer in our industry. We’ll ask you for your opinion and ensure we do our part to keep you developing and engaged as we grow our business. Working at Lineage is energizing and enjoyable. We value respect and care about our team members.
Lineage is an Equal Employment Opportunity Employer and is committed to compliance with all federal, state, and local laws that prohibit workplace discrimination and unlawful harassment and retaliation. Lineage will not discriminate against any applicant on the basis of race, color, age, national origin, religion, physical or mental disability or any other protected status under federal, state and local law.
Benefits
Lineage provides safe, stable, reliable work environments, medical, dental, and basic life and disability insurance benefits, 401k retirement plan, paid time off, annual bonus eligibility, and a minimum of 7 holidays throughout the calendar year.
The ideal candidate will understand current IT compliance frameworks, technologies, and processes while being continuously on the lookout for innovative and flexible ways to automate processes that support a fast-paced, secure, and empowered environment.
KEY DUTIES AND RESPONSIBILTIES
This role covers audit, compliance, vendor risk, and customer assurance functions in the context of cyber security within technology operational areas such as:
- Documenting technology processes and identifying critical technology controls.
- Assisting with internal and external audits and assessments including control assessment, monitoring, and reporting including collection and organization of evidence.
- Conducting third party controls evaluation to determine risk.
- Working with various internal teams or external parties to define and prioritize remediation efforts, tracking remediation activities, and inspecting/validating solutions that have been implemented.
- Responding to customer and partner questions regarding GRC topics.
- Performing other duties within the scope of governance, risk, and compliance as needed.
- Practical experience with policy and regulatory mandates such as SOX 404, COBIT, SOC1/SOC2, CSA-CCM, ISO27001/27002/27031, GDPR, CCPA, PCI-DSS and NIST Risk Management Framework and associated standards such as NIST sp800-34, sp800-53, sp800-171/2, FedRAMP, etc.
- Fundamental technical understanding of key technologies such as Windows, Linux, and Mac, networks, application development, databases, virtualization, and cloud infrastructures.
- 5-7 years relevant experience, or a BA or BS / MA or MS degree in Computer Science/Engineering, Math, Information Security, Information Systems, Information Assurance, Information Security Management, Intelligence Studies, Data Science, or Cyber Security.
- Experience supporting a IT compliance program for a publicly traded company.
- Project management experience in scoping, work break-down, critical path analysis, resourcing, managing time estimates, project risks, and quality.
- Ability to think strategically about risks and tie those risks to tactical organizational activities.
- Professional certifications such as: Certified Information Systems Auditor (CISA) and Certified in Risk and Information Systems Control (CRISC).
This is an excellent position to begin your career path within Lineage! Success in this role enables greater responsibilities and promotions! A career at Lineage starts with learning about our business and how each team member plays a part each and every day to satisfy our customers’ requirements. Beyond that, you’ll help us grow and learn on our journey to be the very best employer in our industry. We’ll ask you for your opinion and ensure we do our part to keep you developing and engaged as we grow our business. Working at Lineage is energizing and enjoyable. We value respect and care about our team members.
Lineage is an Equal Employment Opportunity Employer and is committed to compliance with all federal, state, and local laws that prohibit workplace discrimination and unlawful harassment and retaliation. Lineage will not discriminate against any applicant on the basis of race, color, age, national origin, religion, physical or mental disability or any other protected status under federal, state and local law.
Benefits
Lineage provides safe, stable, reliable work environments, medical, dental, and basic life and disability insurance benefits, 401k retirement plan, paid time off, annual bonus eligibility, and a minimum of 7 holidays throughout the calendar year.
