AVP II, Technology Risk Audit

Description

Position Summary

Essential Job Functions:

• Evaluate risk and control identification within key processes and perform gap assessments on control coverage.
• Respond to internal and external audits, regulatory exams, and requests for information and provide review & challenge of any line of business responses to internal and external audits.
• Demonstrate In-depth practical knowledge of internal controls, RCSAs, risk assessments, and operational and compliance processes, and applicable techniques for implementation of compliance and legal requirements and operational processes.
• Manage workflows and task assignments to ensure timely completion of work.
• Think strategically coupled with the ability to drive to execution.
• Apply an execution-oriented, process efficiency, and continuous improvement mindset.
• Strong understanding and working knowledge of information technology, information security, and development governance frameworks, standards, and regulation.
• Perform other duties as assigned.

Position Requirements:

• 5 to 7 years of information technology risk experience including information security technology skills and expertise.
• 5 to 7 years participating in information technology and information security audits examinations.
• A self-starter, able to work under general supervision. Comfortable working with inter-related infrastructure, software development, and information security risk issues.
• Demonstrated knowledge of information security and information technology risk management frameworks and compliance practices and/or software development risk management frameworks and compliance practices
• Knowledge of information technology, software development, and information security controls.
• Ability to develop security policies, standards, and guidelines based on best practices and industry frameworks.
• Excellent interpersonal, communication, and presentation skills, including formal report writing experience.
• Understanding of common security standards and regulations relating to a financial services environment such as PCI-DSS, NIST CSF, Center for Internet Security (CIS), MITRE ATT@CK., ISO 27000, Agile, etc.
• Familiarity with Microsoft Office tools such as Excel, Teams, and the proven ability to learn how to use other unique technologies.
• Well-versed with financial service industry legal and regulatory requirements.
• Possess intellectual curiosity and a passion for seeking to understand.
• Strong attention to detail, highly organized
• PCI-DSS, NIST, COBIT, CSF, Center for Internet Security (CIS), Agile, etc.
• Comfortable working alone as well as in a team.
• Comfortable with public speaking across various forums and be able to effectively and logically communicate when ideas are being challenged in an open forum.
• Good knowledge and experience in both information technology/security risk management and controls assurance.

Preferred:

• A Bachelor’s degree in Computer Science, Information Technology, Software Development, Finance, or another related field
• Information Technology, Information Security governance, risk, and/or compliance experience in financial services or federal/state/local government including documenting risk and compliance activities.
• Experience participating in information technology, information security, and/or software development audits and risk assessments.
• Experience working in the financial services industry and or a second-line oversight function for a financial institution.