DescriptionAs an Executive Reporting Manager - Risk and Compliance within our Information Security team, you will be responsible for managing a world-class team of technology experts. You will partner with various disciplines, lines of business, regions, or locations to respond to evolving business requirements and emerging threats. You will leverage your expert knowledge of today's ever-changing cybersecurity and risk landscape to influence IT operations across the firm. Your role will involve leading risk reviews and vulnerability assessments, identifying threats, communicating with senior leaders and other stakeholders, and managing budgets.
Our Information Security professionals are passionate about information security and control solutions for computing environments. While managing a world-class team of technology experts, you'll partner with one or more disciplines, lines of business, regions or locations to respond to evolving business requirements and emerging threats. You'll also leverage your expert knowledge of today's ever-changing cybersecurity and risk landscape to influence IT operations across the firm. Responsibilities include offering guidance, best practices, and support across businesses, leading risk reviews and vulnerability assessments, identifying threats, communicating with senior leaders and other stakeholders, and managing budgets.
Required qualifications, capabilities and skills:
- Formal training or certification in Information Security, 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation.
- Proven experience as an Executive Reporting Manager or in a similar leadership role
- Lead and manage a team of 3-4 employees and provide support and guidance, create a positive and motivating work environment
- Ensure collaborating and efficient communication, align goals and objectives with organizational goals
- Strong leadership skills with exceptional communication and presence
- Advanced knowledge of multiple IT controls, metrics reporting, and regulatory reporting requirements
- Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals
- A clear understanding of firm wide technology control reporting and business risk management platforms
- Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection
- Ability to conduct analysis and report on compliance of cyber and technology controls against lines of business, Firm wide and Regulatory Standards.
- Professional and polished verbal skills and experience interacting and supporting senior organizational leaders.
- Demonstrated ability and willingness to operated on multiple tasks while maintaining high delivery standards.