Sr. Cybersecurity Operational Risk Officer

Demonstrated ability to work with internal and external auditors and regulators.

In-depth practical knowledge of internal controls, risk assessments and operational and compliance processes, and applicable techniques for implementation of compliance and legal requirements and operational processes.

Capable of conducting in depth testing of systems, processes and controls

Current and practical knowledge of Technology and/or Information Security activities, challenges, and workflows

Foundational knowledge of Archer GRC preferred

Reporting to the Director of Cybersecurity Risk Oversight, the Sr.

Cybersecurity Risk Oversight Professional is a 2nd Line of Defense risk management position that provides independent oversight and Risk Management subject matter expertise to 1st Line of Defense Business units and their corresponding Business Risk and Control Analysts.

This position is responsible for Operational Risk oversight of the Key Technology and Operations Services line of business, as well as technology and information security risk oversight for areas of the enterprise that manage technology.

As part of this oversight role, experience with cybersecurity domains, operations, architecture, governance, information security, and the ability to leverage that experience to identify material risks, provide credible challenge and assist in developing effective mitigation strategies.

Evaluate risk and control identification within key processes and perform gap assessments on control coverage as well as first line of defense identification processes

Collaborate with leaders to gain insights on operational performance, emerging risks and strategic initiatives while identifying opportunities for improvement.