Job description
VP Information Technology Risk - CRD
Overview
Responsible for contributing to and implementing processes that manage and support the company’s information security and risk management functions. This highly visible role will focus on manager supporting, improving, and expanding the information security program at Charles River, a State Street Company. Tasks include analyzing and improving processes, assisting with security responses to client questionnaires and RFPs, creating and managing security policies and procedures, participating in corporate assessments and audits, and providing technical and security expertise as required. The candidate will be a member of the Technology Risk Management team reporting to the Manager Information Security & Risk.
Primary Responsibilities
Process Management
-
Analyze existing processes and suggest / implement / maintain improved processes for the team.
-
Participate in audits of related business activities, controls, and processes
Third Party Risk Management / Client Support
-
Provide security and technical expertise on client questionnaires, DDQs, and RFP responses
-
Assist in the responses to third party vendor questionnaires and client audits
-
Participate in implementation of automation tools and integration with other applications.
Policies and Procedures
-
Develop, evaluate, and review information security policies and procedures
-
Assist with maintaining current ISO 27001 certification and assist with achieving new certifications as required. Participate in client audit sessions.
-
Conduct assigned responsibilities related to policies implementation and execute a range of complex tasks and analyses to support the risk units.
ISO 27001 Certification
-
Develop or enhance ISO 27001 and other security controls
-
Conduct information security reviews based on ISO 27001, NIST or other security frameworks
-
Monitor compliance with policies and procedures, provide metrics and reporting
Risk Management and Other Tasks
-
Identify control issues and emerging risks; work with colleagues to ensure timely and effective creation and remediation of controls.
-
Proactively identify risk events including breaches and data disclosures and escalate to management
-
Suggest and prepare TKRIs with Charles River and State Street teams
-
Work independently within the scope of established guidelines and practices and consult with senior staff where clarification or exception to policy may be required.
-
Cultivate effective relationships with internal business partners to successfully achieve organizational goals.
-
Act in accordance with Risk Excellence and Standards of Conduct, and Ethical decision-making models.
-
Proactively manage workload to successfully meet milestones and department objectives
-
Continuously enhance and update industry knowledge to develop subject matter expertise
-
Participate in a variety of risk management projects as needed
-
Build strong relationships with business and IT organizations.
Job Requirements
-
Bachelor’s degree
-
CISSP and other security industry certifications (i.e., CISA, CISM, GIAC) a plus.
-
5-7 years relevant . information security / risk management, compliance, audit, or third-party risk experience
-
Technical skills in Salesforce, Sharepoint, ServiceNow, Microsoft Azure, networks, cloud security, encryption, and database security helpful
-
Experience working in the financial services, technology or software industries
-
Familiarity with control frameworks, ISO 27001, NIST, CCF, or other similar compliance requirements
-
Working knowledge of applicable laws, regulations, and standards relating to security and data privacy
-
High level of analytical and problem-solving abilities
-
Interest and aptitude to conduct research into security issues and security products as required
-
Strong organizational skills and attention to detail
-
Excellent verbal and written communication skills
-
Understanding of security/computer incident response methodologies and trends
-
Adept at interacting with all staff levels and with customers
-
Strong written and oral communication and presentation skills
-
Ability to work independently and with virtual teams across different teams and jurisdictions.
-
Strong time management: prioritization versus deadlines.
-
Self-driven / proactive personality.
-
Applicants with previous experience acting as a trusted information security advisor to business and clients in a large organization a plus.
Salary Range:
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
smogtown13.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, smogtown13.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, smogtown13.com is the ideal place to find your next job.