Information Security Officer

Information Security Officer

Tech Tammina LLC

Job Description

6+ years of experience in a technology leadership position

6+ years of experience in multiple industry risk, control and governance disciplines (e.g. Audit, Business Continuity Planning, and Regulatory Compliance).

In-depth understanding of information technology and business continuity principles and best practices across the industry as well as project management principles.

Broad knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g. ISO, COSO, COBIT) as well as knowledge of compliance, legal, internal / external audit & regulatory requirements.

Significant expertise in the collaboration, facilitation and coordination of the mitigation of risks. Adept at navigating governance structures. Ability to manage and analyze data. Experience raising awareness of information and technology risk throughout an organization.

Understanding of metrics development and reporting. Strong problem solving and program execution skills. Ability to prioritize and drive difficult decisions among business partners.

Ability to solve or to collaborate in solving very complex risk issues that span legal, compliance and regulatory obligations across various lines of business and shared service areas of the company.

Ability to prioritize and drive difficult decisions among business partners

Strong client relationship management experience and influencing skills.

Strong interpersonal and oral/written communication skills, able to build relationships with people at all levels. Experience developing and delivering presentations to all levels of management. Strong ability to develop, lead and manage a professional staff.

Qualifications

Develops strong relationships and interacts with Enterprise Risk Management Leadership, Business Line and Regional Leadership, Global Functions, Internal Audit, External Regulators, Legal and Compliance, Privacy and IT teams to coordinate activities

Represents Technology Risk in internal councils and committees

Works with applicable business, operational and IT organizations to help ensure that business and IT projects are appropriately monitored for IT risks

Coordinates with business and regional leadership including Operations, IT, Compliance, Audit, Legal and Communications on information security and risk issues

Coordinates with Technology Risk Managers for regions, other Business Lines and Corporate Functions

Be accountable for Technology Risk engagement