What are the responsibilities and job description for the Technical Risk Manager position at Prosum?
Job Details
Hybrid onsite in Greater Phoenix, Chicago, New York, or San Francisco!
Contract to Hire!
This position does not offer sponsorship. Candidates must be legally authorized to work in the United States without sponsorship now or in the future.
Position Overview
This role is responsible for the execution of a Technology first-line of defense (LOD1) risk and internal control program for Early Warning. The individual will work closely with the company s Enterprise Risk Management Leadership to ensure the consistent implementation and operationalization of the three lines of defense framework across the enterprise.
Key Responsibilities
- Develop, implement, and maintain technology policies, standards, procedures, and guidelines.
- Ensure adherence to the policy approval process.
- Support the maintenance of Technology s process inventory and internal control environment inventory.
- Serve as the primary contact for technology-focused external and internal audits and assessments (SOC2, PCI DSS, etc.).
- Effectively communicate technology and security risks and vulnerabilities.
- Ensure solutions are aligned with approved policies, collaborating with Technology and Security teams.
- Act as a liaison between business lines and Enterprise Risk Management, as well as Operational Risk Management.
- Conduct control testing for technology controls to verify proper implementation and operation.
- Facilitate risk identification and remediation processes.
- Ensure the existence and adequacy of risk remediation plans, track progress, and ensure timely and sustainable completion.
- Assist Technology teams in enhancing the confidentiality, integrity, and availability of systems.
- Identify and implement process improvement initiatives.
- Collaborate with process and control owners to define and implement control performance requirements.
- Support the organization s risk management goals and ensure the integrity and confidentiality of systems and data are protected.
Minimum Qualifications
- Bachelor's degree in Computer Science, Business Administration, Finance, Accounting, or a related field, or equivalent experience.
- At least 5 years of relevant experience.
- Familiarity with frameworks and standards such as ISO 27000, PCI DSS, NIST 800-53a, COBIT, FFIEC Handbook, SOC2 Type II, GLBA, FCRA, FISMA.
- Strong communication, organizational, and presentation skills.
- Background check and drug screening required.
Preferred Qualifications
- 5 years of experience in security, governance, compliance, IT audit, information technology, or a related field.
- Certification in CISA, CISSP, CCSP, CRISC, or similar, or the ability to obtain one within 12 months of hire.
- Experience with security technologies including firewalls, IDS, SIEM, vulnerability scanners, antivirus, data leak prevention, two-factor authentication, and VPNs.
- Experience managing business continuity and disaster recovery efforts.
- Additional relevant education and/or experience is a plus.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
