Director, Card Tech Risk Advisor
$230,400–$263,000 year
On-siteRichmond, Virginia, United States or McLean, Virginia, United States
Job Summary
Conduct technology risk consulting to the business and stakeholders by leveraging expertise in information security, vulnerability management, and network security across federated and centralized applications. Manage a comprehensive technology risk delivery model through other Technology Risk Managers while collaborating strategically with Accountable Executives and interfacing with enterprise technology teams. Execute risk identification, measurement, analysis, and reporting to drive organizational change, ensuring compliance with laws, regulations, and policies such as NIST, FFIEC, and PCI. Facilitate risk assessments, document and track resolution of risk events impacting customers, and develop permanent corrective actions. Deliver appropriate, succinct information tailored to diverse audiences, incorporating different perspectives and solutions into deliverables. Manage special projects with up to 10% travel when applicable.
Required Qualifications
- Bachelor's Degree or Military experience
- At least 7 years of experience in information technology: resiliency and change management operations, software delivery, access management, information security or cloud computing
- At least 5 years of experience in people management
- At least 4 years of experience in analyzing data extracts to identify trends, patterns, and anomalies, including experience in test scripting, writing, reviewing, or assessing code
- Proficiency in risk management program (ideally Technology risk-driven program) development and management
- Experience with technology (e.g. AWS environment)
- Cyber expertise (e.g. information security, network security, vulnerability management)
- Familiarity with risk management and industry standards (e.g. NIST, FFIEC, PCI)
- Experience leveraging expertise in technical domains such as information security, vulnerability management, and network security across both federated and centralized applications, platforms, and controls
- Experience managing other Technology Risk Managers through the implementation of a comprehensive technology risk delivery model
- Experience collaborating effectively across multiple organizations to achieve objectives
- Experience delivering appropriate, succinct and organized information, tailoring communication style to audience
- Experience communicating complex issues and implications, incorporating different perspectives and solutions into deliverables
- Experience conducting analysis of data extracts in order to identify trends, patterns, and anomalies to draw conclusions and escalate key risks and issues
- Experience facilitating and ensuring compliance with policies through risk assessments and enterprise risk management programs
- Experience identifying opportunities for continued improvement in the business
- Experience identifying, documenting and tracking resolution of risk events / issues impacting customers stemming from process breakdowns or other problems, and helping develop permanent corrective actions
- Experience traveling up to 10% when applicable
Desired Qualifications
- Master's Degree
- 8+ years of experience in information technology management
- 6+ years of experience in people management
- Certifications related to or pursuing certification related to Cloud, Cyber or Technology Operations, such as Cloud provider certifications, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
- PMP, Lean, Agile, or Six Sigma certification
- 5+ years of experience in Banking and/or Financial Services
- 5+ years of experience evaluating, implementing, or managing cyber or information security
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.