What are the responsibilities and job description for the Principal Information Security Governance & Risk Management position at System One Holdings, LLC?
ALTA IT Services is a wholly owned subsidiary of System One, a leading provider of specialized workforce solutions and integrated services. ALTA is an established leader in IT Staffing and Services, for both government and commercial enterprises across the United States, specializing in Program & Project Management, Application Development, Cybersecurity, Data & Advanced Analytics, and Agile Transformation Services.
Principal Information Security Governance & Risk Management
Hybrid in Vienna, VA
Contract
Description :
The Principal, Information Security Governance & Risk Management supports the client's Information Security Division in effectively managing the Enterprise's Information Security risks and overall program. Responsible for the strategy, management and the overall execution of first line of defense information security risk management and governance activities at the enterprise. This role will collaborate with Sr. leaders across the enterprise to identify, mitigate and manage information security risks. Uses extensive industry and real-world experience to lead information security governance and risk management activities, developing pragmatic solutions to address gaps in line with established risk appetites. Ensure information security governance and risk management activities align with strategic business initiatives, achieve business and quality objectives, mitigate risk and enhance operating procedures. Develop dashboards, metrics and reporting data to provide consultative guidance during monthly and quarterly governance committees. Promote operational efficiency and service excellence through appropriate risk controls, process improvements and training while reducing and mitigating financial losses.
Responsibilities :
- Lead the Information Security Program Risk Assessment.
- Develop and lead a comprehensive Information Security Program Maturity Assessment and Risk
Assessment initiatives in line with the enterprise goals and regulatory expectations.
from business activities. In addition, provide guidance and advice to senior management on the
status of their control environment related to standards compliance, risk identification and control
issues. Identify critical areas to monitor and escalate issues and findings to appropriate
stakeholders and governance committees.
to sponsors and risk owners and, if necessary, assist with security exceptions or issue management
governance practices in alignment with risk and compliance frameworks.
Qualifications and Education Requirements :
Economics, or related field, or the equivalent combination of education, training and experience
financial services or other relevant industry, especially Operational Risk Programs
institution.
CSF, ITIL)
implementation
development
Desired Qualifications and Education Requirements :
medium to large financial institution.
to large financial institution.
Science, Engineering, Quantitative discipline or related field
CISSP, CGEIT, CRISC, CFE, CPA, CIA, CIPP, ISA, AWS and etc.
