- Design/execute specific Information Technology and Security risk program elements to mitigate enterprise IT and security risks throughout the Bank. Be a role model to more junior members of the team.
- Design/engineer/execute the implementation of the components of the Information Technology Risk Program to include external compliance, internal audit, security, vendor management, operational risk, quality assurance and quality controls for technology and information security.
- Design/engineer/execute internal and external compliance technology audits and regulatory exams, representing Information Technology throughout the lifecycle of the audit. (planning through remediation strategy).
- Execute the first line of defense Risk Management functions for IT meeting the Enterprise Risk Management (ERM) program elements, processes and compliance requirements. Execute the Risk Controls Self-Assessment process for Information Technology and Information Security.
- Execute Awareness and Training for Risk Program elements to enhance awareness and training appropriate for Flagstar's needs to ensure that risk responsibilities are understood and carried out throughout the enterprise.
- Design and execute implementation of Governance, Risk, and Control frameworks and systems based on recognized best practices such as COBIT, ISO, NIST, GLBA, SOX, FFIEC, etc.
- Ensures compliance with applicable federal, state and local laws and regulations. Completes all required compliance training. Maintains knowledge of and adhere to Flagstar's internal compliance policies and procedures. Takes responsibility to keep up to date with changing regulations and policies.
- High School diploma, GED, or foreign equivalent required.
- Bachelors degree in a related field is strongly desired.
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager, (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC) preferred.
- Security, risk and audit specialized training highly recommended.
- 4+ years of experience working in technology audit, Information Security, or Information Technology.
- 3+ years of SOX IT control execution or testing or IT auditing experience or IT risk.
- Three years of Information Security or IT experience.
- Demonstrated experience in Risk and Control Self Assessments, Audits, or exams for technology or information security.
- Demonstrated ability to audit general IT controls including related infrastructure (Active Directory), operating systems (UNIX, Linux, Windows), databases (Oracle DB and MS SQL DB), and applications (Oracle, PeopleSoft, Salesforce, etc.).
- Design and perform root cause analysis, control gap assessments, and process improvement projects using technical and problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions.
- Understand Industry standard frameworks for technology, such as COBIT, ISO, NIST, SANS, and others to design Governance, Risk and Control frameworks, and systems for technology and information security.
- Design and develop internal control documentation including narratives, process and data flows, and other supporting work papers.
- Moderate to in-depth understanding of business environment and risks associated with the financial services industry, IT environments, and information dataflow.
- Understand IT audit principles and audit procedures, and determining and evaluating the severity of potential issues identified during testing, and to provide guidance to more junior team members.
- Understand IT organization business processes and systems (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).
- Participate in multiple projects concurrently, works under pressure well.
- Strong verbal and written communication skills with comfort around presenting new ideas and presentations to senior management.
- Demonstrated track record of meeting time commitments.
- Demonstrated track record of working effectively across functional and organizational lines.
- Demonstrated knowledge of risk management tools.
- Ability to work in teams, and/or as an individual contributor.
-
Sr. Technology Risk Engineer
1 week ago
Flagstar Bank Troy, United StatesThe Sr Technology Risk Engineer is responsible for the delivery of the program elements of all first line of defense risk activities directly or indirectly impacting Information Technology and Information Security within Flagstar. The Sr Information Technology Risk Engineer will ...
-
Eclipse Enterprises Clawson, United StatesCreating Fascination: Your Responsibilities · Project management of development projects in the field of electric motors and drives according to the Stage-Gate process · Ensuring time, cost, and quality goals within the development process · Detailed coordination of project scope ...
-
Information System Security Officer
6 days ago
BAE Systems Sterling, United States**This position can be based out of Sterling, VA, Rockville, MD, or Pensacola, FL. This position is eligible for maximum telework (>50%).** · This BAE Systems program supports our federal customer who plays a key role in providing direct cybersecurity engineering support. This pr ...
-
Quality Technician
3 days ago
Dana Incorporated Sterling, United StatesDana is a global leader in the supply of highly engineered driveline, sealing, and thermal-management technologies that improve the efficiency and performance of vehicles with both conventional and alternative-energy powertrains. Serving three primary markets - passenger vehicle, ...
-
Data Center Program Manager
1 day ago
Microsoft Sterling, United StatesIn alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day and we need you as a **Datacenter Project Manager** (**DCPM) - Power Harvesting** with the primary focus at reducing ...
-
Power Portal
1 week ago
Strongbridge Sterling, United States**Description**: · **Responsibilities**: · - Present technical ideas and approaches to peers or the IT team. · - Leverage existing API's and integrating the endpoints into PowerApps. · - Develop System Administrator Guides. · - Create and assist with documentation like System Adm ...
-
Technical Strategist
1 week ago
Strongbridge Sterling, United States**Brief summary of position** · The _Technical Strategist_, supports business growth by interfacing with potential customers, crafting technology solutions to solve customer needs, building prototypes of proposed solutions, and developing technical proposals. This mid-level posit ...
-
Program and Financial Analyst
10 hours ago
Strongbridge Sterling, United States**THIS IS NOT A REMOTE ROLE. 1 DAY/WEEK IN-OFFICE.** ** · **Anticipated **Duties and Responsibilities**: · - Provide proposal pricing support for strategic bids and task orders to the Federal Government, including building/manipulating/maintaining interactive cost and revenue mod ...
-
Superintendent
1 week ago
Balfour Beatty Sterling, United States**Become Part of Our Team** · As an industry leader Balfour Beatty offers employees a comprehensive benefits package with competitive salaries and more including: · - Medical, Dental, Vision and Life Insurance · - Health Savings Account · - 401(k) with company match · - Flexible ...
-
Business Development Manager
4 days ago
Network Runners, Inc. Sterling, United States**Business Development Manager (Remote)** · **Company Description**: · Network Runners, Inc. is an Information Technology Solutions Company - providing innovative IT solutions and organizational support within the DOD and the Civil sector. Our largest presence is in the U.S. Army ...
-
Project Manager
2 weeks ago
NuAxis Innovations Sterling, United States**We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.** · **Technology is our Passion. People are our Purpose.** · We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We wo ...
-
Data Scientist
10 hours ago
ManTech Sterling, United States**Secure our Nation, Ignite your Future** · - Perform hands-on analysis and modeling involving the creation of intervention hypotheses and experiments, assessment of data needs and available sources, determination of optimal analytical approaches, performance of exploratory data ...
-
Purchaser
1 week ago
Nexus Solutions Sterling, United StatesOperative Purchaser in Timber Modular Construction (m/f/d) · Full-time · We are currently looking for an operative purchaser (m/f/d) to join our motivated team of industry specialists in the field of timber modular construction. · Your responsibilities · Procurement of materials ...
-
Conservation Planner
1 week ago
IDOA/NRCS/SCSWCD Capacity Building Initiative Pontiac, United StatesOverview of Project: The purpose of this initiative is to allow the Natural Resource Conservation Service (NRCS) and the Illinois Department of Agriculture (IDOA) to address the conservation staffing capacity challenges and expand Nutrient Loss Reduction Strategy efforts in Illin ...
-
Haleon Warren, United StatesHello. We're Haleon. A new world-leading consumer health company. Shaped by all who join us. Together, we're improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands - including Sensodyne, Panadol, Advil, Voltaren ...
-
Supply Planner
2 weeks ago
Haleon Warren, United StatesLocation: Warren, NJ · Salary Range: $92, $139,162.80 · Hello. We're Haleon. A new world-leading consumer health company. Shaped by all who join us. Together, we are improving everyday health for billions of people. By growing and innovating our global portfolio of category-leadi ...
-
Safety Engineer E/E/PE
2 weeks ago
Stellar Enterprises Ferndale, United StatesWHAT WE ARE LOOKING FOR · As a Safety Engineer (m/f/d), your focus will be on technical risk analysis for electrical and electronic components. Your responsibilities will include the following: · - Analysis and evaluation of architecture and selected elements · - Creation of tech ...
-
Quality Manager
1 week ago
Centrotherm Eco Systems, LLC. Waterford, United States: · The Quality Manager is accountable for spearheading and supervising the quality initiatives at Centrotherm. In this pivotal role, you will oversee the establishment and maintenance of efficient protocols while ensuring adherence to quality standards. This position entails col ...
-
Omega Ventures Fraser, United StatesAre you looking to take on responsibility and make a difference with your work? With your expertise, we can achieve great goals together. We are WACKER - Reliable. Determined. Ambitious. As one of the most research-intensive chemical companies in the world, we have been enabling ...
-
Program Engineering Manager
2 weeks ago
BAE Systems Wayne, United StatesYou don't see it, but it's there. Our employees work on the world's most advanced electronics - from saving emissions in the City of Lights to powering the Mars Rover to protecting the F35 fighter jet. At Electronic Systems, you'll be among the brightest minds, working on the aer ...
Sr. Technology Risk Engineer - Troy, United States - New York Community Bank
Description
Job Summary
The Sr Technology Risk Engineer is responsible for the delivery of the program elements of all first line of defense risk activities directly or indirectly impacting Information Technology and Information Security within Flagstar. The Sr Information Technology Risk Engineer will leverage experience in business and technical acumen environment to execute the technical program activities in the areas of audit, technology, compliance, risk management and security. The position will be responsible for delivery of an Information Technology Risk program with clear, defined operational policy, standards and procedures related to Information Technology and Security..Job Responsibilities:
Job Requirements:
Sr. Technology Risk Engineer professionals in Troy
-
Neeraj Gupta
Following my keen motivations for enhancing my professional carrier and developments in artificial i ...