IT Risk Manager

Profile

As the IT Risk Manager, you will have primary responsibility for facilitating the technology risk management practice within the Information Security organization. This includes all elements of risk identification, classification, review/escalation, and disposition. This role will also provide support for designing, implementing, updating, and enforcing security controls, safeguards, policies, and procedures to ensure security of the company’s technology and information.
Additionally, you will support and lead the Governance Risk and Compliance function ensuring ongoing compliance to in-scope and emerging regulations and industry frameworks
Primary Responsibilities
Manage the resources to support IT security goals and objectives to identify risk, recommend strategies to reduce overall IT risks.
Participate in various client audits, compliance and certification projects, working with external assessors. Ensure continuous control evidence is collected and filed for ongoing/future security risk assessments.
Lead information security compliance by establishing and operating an effective information security GRC program across all business units
Maintain a vendor risk management program, conducting vendor security assessments, and integrating risk treatment plans into the existing risk management program.
Continuously validate company’s compliance status against policies, guidelines, procedures, regulations, laws to ensure risk mitigation and compliance where applicable.
Manage periodic reviews of security policies, processes, procedures, and manage exceptions
Ensure that security audits, tests, and reviews are reviewed coordinated, conducted and on a scheduled basis.
Coordinate end-to-end Issue Management process identified through the security risk assessments. Identify, implement Remediation Action Plans.
Ensure that security audits, tests, and reviews are reviewed coordinated, conducted and on a scheduled basis.
Perform security risk assessments to identify gaps, come up with recommendations and drive the gaps to completion
Maintain, assign, and oversee the controls necessary to remain compliant in relevant standards.
Update cybersecurity policies and standards.
Must be able to work independently and guide junior resources on multiple tasks performing complex analysis of risk/governance data
Qualifications
Bachelor's degree and 8 years in Information Security, IT Risk, IT Governance, or IT Audit role in a financial services company.
Demonstrated knowledge and experience in the implementation of governance frameworks and security risk management processes such as NIST, ISO, COBIT guidelines and standards
Hands on experience of industry standard GRC Tool desired
Excellent communication skills and a familiarity with common compliance standards (SOX, PCI-DSS, HIPAA, GLBA etc.)
Experience and knowledge in IT security governance/compliance
Strong understanding of information security fundamentals
Familiarity with cloud technologies, terms
Ability to translate complex concepts regulatory requirements and legislation to meet a range of requirements
Strong sense of ownership over your work
Experience coordinating the security and compliance aspect of Audit and RFP letters and requests.
Certified Systems Information Auditor (CISA) or Certified Information Risk and Controls (CRISC) a plus but not a requirement
Familiarity with intrusion prevention software, vulnerability assessment software, system security vulnerabilities and remediation techniques, including penetration testing and exploit development
COMPANY
LendingTree is the nation’s largest online lending marketplace. That means we connect customers with multiple lenders, so they find the best deals on loans, credit cards, savings accounts and insurance. Our goal is to help people save money, and we believe the best way to do that is by giving them a way to shop for loans and compare lenders, so they make their best financial choices.
Our CEO Doug Lebda founded the company in 1996 after a frustrating house-hunting experience. In those days, we mostly helped people find good mortgage deals. Now, we help consumers find their best in personal loans, auto loans, business loans, student loans, credit cards, savings accounts, home equity loans, insurance and more.
What else you should know:
We’re a publicly traded company (TREE).
We’ve welcomed several other companies into the LendingTree family to augment our efforts at helping borrowers make their most sensible financial choices.
We’ve built the LendingTree app and My LendingTree dashboard to give consumers tools to manage and monitor their financial health.
We still make funny commercials.
CULTURE
We’re a fast-paced company with an entrepreneurial bend. We work hard and test our products often. We’re collaborative, ambitious, candid and high-energy. Our teammates are some of the brightest, most talented people you’ll ever work with. We care more about your smarts than we do about the kinds of clothes you wear (but please,
do
wear clothes to work!), and we’re pretty good about rewarding innovation, creativity and the knack for just getting stuff done (we even have an award for employees called the GSD, “Get Stuff Done”).
Come work with us!
LendingTree is the kind of company that not only promotes diversity and inclusion; we thrive because of these values. We do not discriminate based on race, color, religion (or creed), gender, gender expression, age, national origin, disability, marital status, sexual orientation or military status.

Company info

Sign Up Now - MiamiCrossing.com