Cyber Risk Methodology Lead

Overview

This is a remote role that may be hired in several markets across the United States.

This position provides cybersecurity risk management and expert support at the highest level of cybersecurity governance and oversight for cyber processes, risks and controls.  Creates methods to evaluate potential losses, and develops high-impact solutions to minimize or eliminate risk. Recommends and monitors enhancements to current processes and procedures, performing analysis and reporting in support of strategic objectives. Serves as a resource and may provide a leadership role for the work group through knowledge in the area of specialization.

Responsibilities

Risk Identification and Monitoring - Leads the design and implementation of process evaluation methods, and the development of expert solutions to address identified risks. Works closely with management to ensure risk strategies are effective and compliant. May involve creation, evaluation, and execution of targeted risk assessments to evaluate risk conditions.

Maintains a strong knowledge of cybersecurity risk management developments or changes within the organization, industry, and market.

Reporting - Produces reports based on risk management assessments, data analysis, company trends, and risk factors. Conveys root cause analysis, patterns, problems, and areas of improvement. Enables insight into potential risk exposure, losses and mitigation of identified risks through reporting activities.

Business Support - Supports cybersecurity processes through a variety of escalated operational tasks. Develops, implements, and ensures continuous improvement of procedures. Acts as a resource to provide guidance to management, including production of documentation, presentations, or other materials to educate on risk policies and procedures. Handles complex technical matters and participates in special projects.

Qualifications

Requirements :

Bachelor's Degree and 4 years of experience in cyber risk management, or cyber risk oversight OR High School Diploma or GED and 8 years of experience in risk management, or financial analysis, or statistical modeling

Experience identifying information security risk and partners with key stakeholders to monitor, reduce or eliminate risk

Experience conducting risk and control activities per the Enterprise Risk Management Program and Regulatory requirements

Experience executing cyber risk management procedures for required assessments, open high risks, root cause analysis, action plan development, remediation documentation and monitoring

Experience reviewing emerging risks concerns and provides early warning indicators on key risks

Experience developing, enhancing, or optimizing cyber risk assessment processes, methodologies, or frameworks to drive improved risk identification and management practices

Experience with NIST frameworks, demonstrated background in applying and implementing NIST standards (e.g., CSF, SP 800-53) to develop, assess, improve cybersecurity controls and practices

Impeccable written and oral communication skills with ability to influence strategic objectives

Preferred Qualifications :

7-10 years of experience in risk management leading risk assessments (FFIEC CAT, GLBA, NIST CSF, PCI, ISO, Cyber Security Management)

3+ years of experience at Large Financial Institution

CISSP, CISA, CISM or CRISC certification

Broad knowledge and understanding of cybersecurity risks and controls, including a strong understanding of IT infrastructure, cloud computing, mobile technologies, and cybersecurity technologies.

Extensive knowledge and subject matter expertise in managing cybersecurity risk in an institutional setting including the related rules and regulations of the financial services industry to include applicable Interagency Guidance, NIST, CSA, FFIEC, OCC, FRB, state law and other pertinent regulations.

In-depth practical knowledge of internal controls, risk assessments and operational and cybersecurity processes, and applicable techniques for implementation of regulatory, cybersecurity, and legal requirements and operational processes.

Strong project management and / or continuous improvement skills.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

The base pay for this position is

generally between

$160,000 and $210,000. Actual starting base pay will be

determined

based on skills, experience, location, and other non-discriminatory factors

permitted

by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and / or other awards as outlined in the offer of employment.

First Citizens benefits programs are designed to meet our associates where they are in life. Full-time associates (20+ hours) are offered a comprehensive benefits program, with customized offerings, including those designed to support families, however defined. More information regarding our benefits offerings can be found here : https : / / jobs.firstcitizens.com / benefits

Company Description :

Founded in 1898 and headquartered in Raleigh, N.C., First Citizens Bank serves customers in 18 states and the District of Columbia. For over 100 years, customers have trusted First Citizens with their money … and their futures. Today, First Citizens is the largest family-controlled bank in the nation and the sixth-largest bank franchise headquartered in the Southeast with more than $30 billion in assets. We employ more than 6,000 associates who are focused on helping our customers achieve a lifetime of success. First Citizens operates more than 570 branches in Arizona, California, Colorado, District of Columbia, Florida, Georgia, Kansas, Maryland, New Mexico, Missouri, North Carolina, Oklahoma, Oregon, South Carolina, Tennessee, Texas, Virginia, Washington and West Virginia.

First Citizens Bank. Forever First®. Member FDIC.

Equal Opportunity / Affirmative Action Employer / Minority / Female / Disability / Veteran

If you need special assistance or an accommodation in applying for employment at First Citizens Bank, please contact our Human Resources department.