Information Technology Risk Manager

IT RISK AND CONTROLS ANALYST/MANAGER

FULL-TIME PERMANENT

Hybrid/Remote

Large Enterprise Client (Insurance)

An expanding organization is currently seeking a skilled Manager specializing in IT Risk and Controls to join their team. As the Manager, you will have a vital role in overseeing and managing IT risks to ensure they align with the organization's risk tolerance. You will report directly to the Senior Manager in charge of IT Risk, and your contributions in this position will have a positive impact.

Responsibilities:

• Supporting the establishment of a robust and continually improving risk and control environment by conducting risk training across the IT department.
• Maintaining accurate records in the organization's Risk Management system.
• Managing end-to-end coordination of audits, issues, risk events, and risk reviews, which entails tasks such as questionnaires and ad-hoc requests.
• Providing objective opinions on risks and controls to stakeholders.
• Engaging with a wide range of stakeholders involved in risk management to ensure proactive and timely mitigation of risks.
• Collaborating with Risk and Governance teams and Business Leadership across various business units, both locally and globally, to identify and implement best practices and standards.
• Developing and implementing risk management processes and procedures specific to the IT Risk team.
• Preparing formal risk reports that adhere to established standards for various committees and forums, where you will represent the IT department.
• Monitoring and escalating the resolution of actions to ensure they are addressed promptly and effectively.
• Coordinating and providing guidance on remediation efforts for risk and control gaps.
• Conducting diverse risk assessments, including inherent and residual risk assessments, root cause analysis, RCSAs, risk events, and risk exceptions.

Requirements:

• Demonstrate proficiency in leading and managing initiatives related to risk, with the ability to handle multiple priorities in a matrixed environment and deliver results.
• Familiarity with Data Management Governance policies, standards, and processes.
• Excellent written and verbal communication skills.
• Exhibit proficiency in identifying and analyzing relevant data and information, as well as defining critical issues and exploring alternative solutions.
• Have a minimum of 5 years of combined experience in audit, IT risk and compliance, and Information Security, preferably within the financial industry.
• Understand the Software Development Life Cycle (SDLC), CIO business, strategy, and plans.
• Preference will be given to candidates with CISA, CISM, CISSP, and/or CRISC designations.
• Possess a Bachelor's degree in Computer Science or Computer Engineering.