Risk Process Technical Specialist IV

Job Description

Job Description

OVERVIEW:
Uses professional knowledge, skills, and experience to develop a comprehensive strategy for use and continuous enhancement of the Bank's centralized control assessment technologies. Ensures execution of this strategy remains on track through coaching and developing other Cybersecurity personnel and monitoring on-going evolution of the centralized control testing process. Establishes internal and external relationships to remain current with emerging risks, best practices, and evolving regulatory landscape to support these activities.

PRIMARY RESPONSIBILITIES:
Formulate business requirements that drive implementation or enhancement of technologies to meet centralized control assessment objectives including vulnerability scanning and penetration testing tools, server compliance assessment tools and static code analysis tools.
Configure centralized control assessment technologies.
Develop and document operational procedures for use of centralized control assessment technologies.
Identify, evaluate, and implement process and reporting enhancements within centralized control assessment technologies; provide support to the vulnerability assessment team.
Participate in conversations with centralized assessment technology vendors.
Develop test scripts for implementation or upgrade of centralized assessment technologies and document test results.
Design and document technical compliance standards for Bank systems and infrastructure.
Develop escalation procedures to track and remediate centralized control assessment findings.
Research and train on industry trends surrounding centralized control assessment technologies. Share information with management and the Risk Process team.
Provide input to management during annual budgeting process.
Own relationships with Technology teams that support centralized assessment technologies.
Lead, supervise and mentor less experienced members of the Risk Process Team.
Understand and adhere to the Company's risk and regulatory standards, policies and controls in accordance with the Company's Risk Appetite. Identify risk-related issues needing escalation to management.
Promote an environment that supports diversity and reflects the *** brand.
Maintain Company's internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Complete other related duties as assigned.

SUPERVISORY/MANAGERIAL RESPONSIBILITIES:
Not Applicable.

EDUCATION AND EXPERIENCE REQUIRED:
Associates degree and a minimum of 7 years relevant work experience, or in lieu of a degree, a combined minimum of 9 years higher education and/or work experience, including a minimum of 7 years relevant work experience.
Prior experience with vulnerability assessment tools.
Strong customer-service orientation.
Excellent written and verbal communication skills.
Prior experience working independently and providing direction to team as needed.
Experience generating, collecting, storing and retaining audit data.
Working knowledge in various scanning solutions and vulnerability risk management platform.
Knowledge on Cybersecurity standards.
Experience in technical writing skills.

EDUCATION AND EXPERIENCE PREFERRED:
Bachelors degree.
CISSP (Certified Information Systems Security Professional), CRISC (Certified Risk and Information Systems Control) certification and/or Cybersecurity domain-related industry-recognized certification.
Proficient technical writing skills.
Detail-oriented.
Prior experience with Incident Response.
Working knowledge on Vulnerability Risk Management lifecycle solutions (ex. Archer VRM).
Working knowledge of eGRC.

EEO:

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.