What are the responsibilities and job description for the Information Risk Manager position at Selective Insurance Group?
About Selective Insurance Group
Selective Insurance Group is a leading provider of property and casualty insurance solutions. Our mission is to protect our customers' interests and deliver exceptional service.
We strive to create a collaborative work environment that fosters innovation, diversity, and inclusion. Our employees are empowered to make a meaningful impact and contribute to our shared success.
Job Overview
We are seeking an experienced Information Risk Manager to lead our information security, risk management, and crisis planning efforts within the Information Technology department.
In this critical role, you will develop and execute strategic plans to mitigate cyber risks by leveraging program maturity assessments, operational reporting, and industry trends.
You will collaborate with cross-functional teams to ensure alignment with best practices and deliver security enhancement projects.
This is a unique opportunity to lead and develop a motivated team of security professionals and contribute to the strategic direction of the Information Technology Services (ITS) Department within a growing company.
Main Responsibilities
- Oversee the day-to-day activities of our information security, cyber risk management, and incident response team.
- Evaluate the enterprise-wide information security program, identify gaps, and develop corrective action plans.
- Lead planning and response to disaster recovery events and security incidents, identifying, managing, and communicating security incidents to key stakeholders.
- Maintain up-to-date business impact analyses and business crisis plans.
- Establish, update, and deliver security awareness and training programs across the enterprise.
- Develop, maintain, and enforce information security policies and procedures in alignment with stated risk appetite, changes in threats, and overall compliance goals.
- Oversee all security audits and tasks.
- Participate in technical aspects of IT-related audits and support internally and externally managed audit activities.