Engineering - Tech Risk - Associate - Security Engineer

HOW YOU WILL FULFILL YOUR POTENTIAL

Your responsibilities will include governance aspects of issue management, CCM (Continuous Controls Monitoring), Control Incident Management, Technology Resilience, and Controls Assurance programs. You will work with all pillars within Technology Risk to understand the risks being identified and their potential impact. You will work with engineering teams to help them understand their complete risk portfolio and how they can reduce risk most effectively. You will partner in programs to reduce risk and improve resiliency across the firm. This will be an opportunity to build broad knowledge of the business and technologies across the entire firm and work with engineers at all levels in the organization.

Responsibilities include:

• Be accountable for driving exceptions to zero, through teamwork, coordination and escalation of newly discovered and existing issues
• Identify and track technology uplifts to manage risk
• Define clear, meaningful metrics for measuring compliance with our policies and standards
• Develop fact pattern analysis for exceptions (develop trends and derive root cause for repeat issues)
• Develop procedures and processes for control oversight and monitoring
• Test and validate the design, implementation, and performance of controls

BASIC QUALIFICATIONS & SKILLS

• Bachelors degree
• 3+ years experience in Risk Management, Risk Reporting, Audits, Governance, Resilience, etc.
• Experience with any data analysis/visualization tool such as Excel, Tableau, Power BI, R, SQL, etc.
• Understanding of risk management principles or SarbanesOxley Section 404, SOC 1 and SOC 2 reporting
• Experience with general and cyber security related Information technology controls design and reviews
• Ability to work effectively in a global team environment and drive results in a matrixed organization
• Results oriented, strong sense of ownership and eagerness to learn
• Knowledge of IT audit methodologies and control frameworks of IT platforms, processes, systems and controls, including areas such as logical access, physical security and change management controls at an infrastructure and application level
• Strong sense of ownership and accountability
• Clear communication skills, both verbally and in writing

PREFERRED QUALIFICATIONS

• Industry certifications such as CISA and/or CISSP desired but not essential
• Experience with public/private Cloud technologies (Cloud Foundry, AWS, GCP, Azure etc)
• Understanding of information technology audit and control frameworks such as NIST COBIT and ITIL