Lead Risk & Control Manager

The supplier call is scheduled for Tuesday, Apr 28th at 3pm EST. Dial in by phone +***,,275453240#
Location: Candidates should be based in the Charlotte area. The role will be fully remote for the initial 2-3 months, followed by a hybrid schedule (4 days onsite per week).
The IT Risk Controls Associate Analyst is a subject-area specialist with specialized training, methods and analytic techniques to create recommendations and directions for cyber risk mitigation in a complex technical environment. Focus areas of security assessment by the ITRC Security Associate Analyst includes third party security and overall security program effectiveness in mitigating risk. The ITRC Associate 's goal to create actionable information for IT and business leadership, and to provide objective assessment of cyber security risks for auditors, regulators, and external parties. This requires routinely authoring detailed reports and gathering metrics ensure stakeholders receive accurate and complete information. The ITRC keeps abreast of external cyber security trends, technologies, and cyber risk management approaches, and often works with other teams on cyber risk-related initiatives to provide subject-matter recommendations and guidance to achieve a posture within the bank's overall risk appetite. Developing professional expertise and continues to acquire higher levels of knowledge and skill in own discipline Works on problems of limited to moderate scope where analysis of situations or data may be required


WHAT WILL YOU DO?
Define analysis objectives, collect data from internal and external sources, and evaluate/analyze data to provide objective information on cyber risks for IT and business management with both summary and detailed reporting
Assess risk within-subject specialty area to evaluate the design and effectiveness of security controls
Provide insight and guidance to IT software and hardware upgrades and other projects to ensure production environments meet and exceed minimum security standards and will effectively counter cyber threats
Create new and maintain process and procedural documentation for various risk analysis and risk assessment activities; Highlight industry-based methodologies, techniques, or standards (FAIR, NIST, FFIEC, etc.) used as the basis for analysis efforts
Participate in other security support projects and duties as needed or requested
Additional Qualifications
Demonstrated experience analyzing complex cyber security data sets within subject area specialty
Demonstrated knowledge of cyber security landscape -- threats, trends, technologies
Demonstrated knowledge of financial regulation and control frameworks applicable to cyber security or IT risk
Excellent communication and interpersonal skills. Including a strong ability to create positive and professional business relationships with internal clients.
Strong commitment to working as a team and providing excellent customer service.
Exposure to banking or equivalent highly controlled technology environment is preferred
Security certifications (CISSP, GSEC, etc.) are highly desired.
Demonstrated experience with Industry or subject specific analysis or assessment frameworks is highly desired (FAIR, NIST CSF, etc.)
Experience in banking/financial industry is strongly preferred
Formalized training in cyber security analysis or assessment techniques"
Demonstrated knowledge of Control frameworks applicable to cyber security or IT risk
Excellent communication and interpersonal skills. Including a strong ability to create positive and professional business relationships with internal clients.
Strong commitment to working as a team and providing excellent customer service.
Exposure to banking or equivalent highly controlled technology environment is preferred
Security certifications (CISSP, GSEC, etc.) are highly desired.