What are the responsibilities and job description for the Risk Manager/Project Manager position at SANS?
Job Details
Job Functions/Duties and Responsibilities:
* Develop an understanding of the Banks' business models and familiarity with technology services provided by the affiliate technology organization, as well as familiarity with active technology risk initiatives and their impact to each Bank
* Analyze applications to determine Bank-impacting and capturing detailed rationale of decision, by eliciting information from key stakeholders
* Coordinate with development teams across the Firm, Firm technology control groups, Bank security officers, and Operational Risk to deliver on program objectives
* Track Bank-impacting technology risks and influence the prioritization of remediation activities
* Produce clear and concise presentation materials related to technology initiatives for quarterly technology governance forums, including updates for Board meetings
* Keep management informed of progress and issues related to technology programs
* Contribute to key regulatory and risk initiatives, and report on risk exposures to enable informed decision-making
* Assist with preparation of responses to technology related regulatory requests
Skills Required:
* 7 years of experience in a similar role in financial or banking services, with practical knowledge of banking principles, products, and bank regulatory environment
* Practical knowledge of technology and information security processes
* High level of attention to detail, focus on precision, and strong analytical skills; with the ability to solve problems independently and drive tasks to completion
* Strong written and verbal communication skills with the ability to summarize complex information clearly for senior technical and non-technical audiences
* Advanced Excel skills, including data import, pivot tables, lookups, and data analysis
* Good interpersonal skills, with an ability to navigate complex organizations and build relationships
* High level of personal integrity, as well as the ability to professionally handle confidential matters, and show an appropriate level of judgment and maturity
* Familiarity with Agile project management methodology
* Heightened Standards for Large Banks, 12 CFR 30 Safety and Soundness Standards
Skills Desired:
* Prior experience working in a large bank
* One or more Industry Certifications (e.g. CISM/CISA/CRISC)
* Knowledge of the FFIEC IT Handbooks, and related laws and regulations including OCC
* Sound understanding of risk assessment methodologies, internal controls, and industry technology risk management frameworks such as NIST, ITIL, CobiT, and ISO 27001
* Proficiency with Jira for project and task management
Education:
* Bachelor's degree in Information Technology, Business, Economics, or Finance