We are looking to hire an Information Technology Risk Manager for one of our clients located in Tampa, Florida / New Jersey. The successful candidate must be able to understand the technical interactions of an IT infrastructure, to include concepts associated with networks, cloud hosting, virtual environments, data management, etc. and should have experience with governance, risk, and compliance projects and program oversight. The pay is $65/hr and the work mode is hybrid. To apply, kindly send your resume to information@korpeatech.com
Must Haves:
- Bachelors’ Degree or industry equivalent work experience
- Minimum 5 years of experience in IT, risk management, and/or IT audit required
- Financial Services industry background.
- Experience with governance, risk, and compliance projects and program oversight
- Broad understanding of Application Security.
- Experience in PEN and FOSS vulnerabilities, WAS, Service Accounts Password rotation.
- Experience with Oracle, AWS, JAVA, Springboot, Jenkins, Python
- Unix, Linux, Tomcat, Liberty
- Knowledge in Agile Development, with Scrum Master (or similar) experience
Job Responsibilities:
- A first line of defense (FLOD) which consists of the businesses and functional units, including Product Management, Operations Management, IT and other areas critical to daily operation and functioning.?
- Partner and liaise with the company's Control Groups, Business FLODs with regard to identifying and assessing inherent risk, control effectiveness and residual risk
- Explore opportunities to improve the effectiveness of controls while also exploring ways to simplify our processes without increasing residual risk
- Responsible for monitoring and managing risk and liaising with various entities for audits and supports control-testing efforts.
- Management to achieve business priorities.
- Coordinate domain response to various control functions and Product Management to support the division
- Provide governance and process support for the division while helping to ensure adherence to internal development processes
- Teamwork – partners with other Embedded Risk Manager to identify best practices and monitors adheres to standard processes
- Documentation – coordinates process reviews for internal and external audits, Compliance, Risk Management & Technology assessments using the Process Risks and Controls (PRC) Framework
- Partners with control functions to support audits & assessments; coordinates Management Self-Identified (MSI) issues and manages the Issue Management process for the domain
- Performs Management Testing to assess control effectiveness and documents results
- Reviews of standards, policies, and procedures and performs rationalization per compliance guidelines. Supports the development and maintenance of system level documentation
- Facilitate technical exchanges with stakeholders to discuss, quantify, and capture program risks
- Apply sound judgement in facilitation and evaluation of IT risks and mitigation strategies
- Think independently and strategically about potential downstream mission impacts
- Respectfully, yet effectively challenge the identification and acceptance of risks to ensure concepts are well thought out and logically documented
- Perform gap assessments of proposed risk mitigation strategies and influence customers towards holistic remediation strategies that address the root-cause issue(s)
- Translate technical jargon into simple to consume concepts for varied stakeholders understanding.
- Perform as a key Technical Advisor for articulating the portfolio of IT Risks, and relay challenges to ERMs, Applications development teams, and senior decision makers.
