You will lead the Cyber Risk Management and IT Controls Assurance programs.
Responsibilities
- Lead effective Cyber Risk Management and IT Controls Assurance programs.
- Manage operational risk processes including loss event management, KRI/KPI production, and risk reporting.
- Execute controls assurance in a first or second line of defense capacity.
- Oversee the implementation of ISO certifications and SOC attestations.
- Manage stakeholders ranging from technical staff to senior executives through negotiation and influence.
Required Skills
- 10+ years of experience in Cyber Security, IT Risk, and technology risk management.
- Direct experience with ISO 27001 standards and SOC 1/2 attestation reports.
- Hands-on use of GRC Platforms, specifically ServiceNow or the ServiceNow Risk Module.
- Technical understanding of networks, vulnerabilities, and types of cyber-attacks.
- Proven ability to manage competing priorities and multitasking in a high-pressure environment.
- Strong conflict management and interpersonal communication skills.
- CISA, CISM, or equivalent certification.
- Certifications in ISO roles or other IT technical certifications.