Senior Manager Information Security Risk Management

Profile

**MEMBERS ONLY**SIGN UP NOW***.
Reports to the Associate Director, Information Security Risk Management.

The selected candidate will lead the team in the ongoing management and activities within the information security risk program which includes risk identification, assessment and management.

The Senior Manager, Information Security Risk Management, will provide leadership to develop and implement consistent information security risk management practices based on a defined framework and methodology. To be successful in this role, the selected candidate will need to be comfortable building relationships and driving change through advocacy and influencing. They should have a solid understanding of various information security frameworks, such as NIST 800-30 and FAIR, while also possessing foundational IT competencies.

This is a great opportunity for the right individual who is excited about leading and working cross functionally across all aspects of information security risk. We are looking for someone who is not only a proven leader but also has a strong risk management mindset.

Responsibilities
• Manage and enhance an information security risk management program, including participation in broader enterprise risk management activities.
• Manage and maintain an information security risk management strategy that guides and informs risk-based decisions (including how risk is framed, assessed, responded to, and monitored over time).
• Enhance and manage process for risk assessment of Information Technology to ensure alignment with policies and standards.
• Identify, generate, and maintain metrics and KRIs used to demonstrate relative risk.
• Report assessment results along with recommendations to close any gaps.
• Provide oversight to ensure security risk management activities are documented and carried out to drive consistent processes.
• Provide expertise and leadership based on industry experience and knowledge to ensure **MEMBERS ONLY**SIGN UP NOW***. remains in compliance with applicable standards and regulations, including evolving data security privacy principles.
• Provide oversight to issues management process and reporting.
• Manage and develop a team of 3 or more individual direct reports.

Basic Qualifications
• 6 or more years of work experience within Information Security, Risk and Compliance, or Information Technology, with at least 2 years of managing complex initiatives in areas of risk management and/or regulatory compliance.
• 3 or more years managing a team of people, including hiring the right talent, building a team, managing performance and development.
• 2 or more years of experience with creating and documenting risk methodologies, maintaining risk registers, and initiating and executing risk assessments.

Preferred Qualifications
• Bachelor's or advanced degree in Business, IT, Computer Science, Engineering, or related field or equivalent work experience
• Experience using Archer or other Governance, Risk and Compliance (GRC) or Integrated Risk Management (IRM) tools
• Effective communicator, relationship builder, and advocate for sound risk management practices.
• Excellent written and oral communication skills, inter-personal skills, and effective skills to support risk programs.
• Ability to communicate effectively across all levels of the organization; provide formal reports and presentations to senior executives as required.
• Knowledge of NIST and HIPAA/HITRUST; general understanding of other governance frameworks, such as PCI, Sarbanes Oxley (SOX), COBIT, etc.
• Certifications such as CISSP/CISM/CRISC Certification are desired.
• Knowledge of the latest information security standards and regulations to ensure compliance both with internal security policies and external compliance requirements.

Company info

Sign Up Now - MiamiCrossing.com