Job Description :
We are seeking a highly skilled Risk Management Specialist to join our team, focusing on risk oversight in a highly regulated banking environment.
The ideal candidate will have a strong background in IT and Risk Management, with hands-on experience in areas such as helpdesk support or SOC analysis.
This role requires expertise in NIST and COBIT frameworks, as well as quantitative risk assessment methodologies, particularly the FAIR framework.
Key Responsibilities :
Risk Oversight
Monitor and analyze external industry trends and regulatory changes impacting technology and information security risk management.
Annual Risk and Control Self-Assessments (RCSAs)
Lead and execute annual RCSAs, ensuring comprehensive evaluations of first line functions and compliance with regulatory requirements.
Targeted Assessments
Conduct targeted assessments to evaluate first line functions, utilizing regulatory guidance and current trends in technology and information security.
Process Level Assessments
Perform detailed process-level assessments to identify vulnerabilities and recommend enhancements.
Vendor Management
Assist in managing penetration testing and physical security assessments with external vendors, ensuring deliverables align with internal standards.
Reporting and Metrics
Develop and report on internal metrics for IT and Information Security, presenting findings to various stakeholders.
Identity Crisis Management
Provide expertise in managing identity crisis situations within the organization, implementing best practices for remediation.
Collaboration
Engage with first, second, and third-line stakeholders to ensure effective communication and coordination across the organization’s risk management framework.
Qualifications :Bachelor’s degree in a related field; Master’s degree preferred.
Experience
Minimum of 10 years in Risk Management, Information Technology, or Cybersecurity, with at least 5 years in first line or second line functions within a banking or regulated environment.
Framework Expertise
Strong knowledge of NIST and COBIT frameworks; familiarity with other regulatory guidance for technology and cybersecurity.
Quantitative Risk Analysis
Experience with quantitative risk assessments and the FAIR methodology.
Technical Background
Previous experience in IT support (helpdesk) or as a SOC analyst is highly desirable.
Certifications
Professional certifications such as CISSP, PCNA, or C-Risk are strongly preferred.
Communication Skills
Excellent verbal and written communication skills, with the ability to engage and influence stakeholders at all levels.
Analytical Skills
Strong analytical abilities to assess processes, data, and trends to recommend enhancements and improvements.
Organizational Skills
High degree of organization and personal accountability, with the capability to make decisions in an ambiguous and fast-paced environment.