Information Technology Risk Manager - Dallas, United States - Heitmeyer Consulting

Description

Role: Senior IT Risk Manager

Location: Irving, TX **MUST WORK ONSITE 4 DAYS A WEEK**

Direct Hire

Responsibilities:

• Oversight of IT Operational Functions in the enterprise application services, including automation solutions, integration solutions, development architecture and common services.
• Oversight of Data Management and Data Governance, including data retention, data analytics, etc.
• Perform reviews of relevant controls and risks for first line, as well as RCSA.
• Prepare regular status reporting for areas of risk oversight.
• Perform Targeted Assessments for relevant 1LOD functions. This would leverage industry frameworks (NIST, ITIL, COBIT, etc.), and relevant regulations to develop a second line opinion regarding the overall effectiveness of assessed first line functions.
• Review relevant regulatory requirements for first line technology and security functions.
• Risk identification and reporting for 1LOD functions.
• KRI development for relevant 1LOD functions.
• Managing issues for relevant 1LOD functions.
• Subject Matter Expert for 2LOD controls testing.
• Review and challenge first line policies, standards, and regulatory packages as applicable.

Required Skills:

• Knowledge of Technology and Information Security core functions and principals specifically industry best practices and technology trends.
• Must have strong Data Risk Management skills and experience.
• Knowledge of operational risk, including risk identification, risk mitigation and risk reporting
• Deep knowledge of applicable regulations for technology and cybersecurity and the ability to effectively guide 1LOD in how to mature their program to align with regulatory guidance
• Ability to influence without direct authority in this role is critical for success. The candidate must be able to establish good working relationships and credibility across the three lines of defense.
• The candidate should be able to communicate their perspective effectively and clearly, including translating technical risks to anyone in the company.
• The candidate must be able to establish credibility with their 1LOD and BCT partners to effectively provide risk oversight to technology and information security teams.