Director, Technology & Cyber Risk Governance (R-14367)

Why We Work at Dun & BradstreetDun & Bradstreet unlocks the power of data through analytics, creating a better tomorrow. Each day, we are finding new ways to strengthen our award-winning culture and accelerate creativity, innovation and growth. Our 6,000+ global team members are passionate about what we do. We are dedicated to helping clients turn uncertainty into confidence, risk into opportunity and potential into prosperity. Bold and diverse thinkers are always welcome. Come join us!
The RoleReporting to the Leader of Global Security & Risk, we are seeking a Director, Technology and Cyber Risk Governance. This role is responsible for the development and oversight of technology risk management governance globally. As part of technology risk governance, this role will ensure that the right visibility is achieved to key stakeholders and technology leaders to ensure they fully understand the technology risk posture for their organization as well as provide the insights to open gaps, issues, and other pertinent risk relevant activities.   The successful candidate has direct oversight and will govern and track technology risks, risk treatment, potential project issues that could result in risk, and overall insights.   In addition to governance, this role will be in alignment with the overall technology risk framework as well as support the enterprise risk policy for D&B.

Key Responsibilities:

• Develop and implement technology risk management strategies and processes in alignment with the organization's overall technology risk management framework.
• Track all open risks and status as well as relevant project/program issues through reporting.
• Conduct a risk forum cadence that includes alignment with technology leaders.
• Provide insights into the risk treatment plans to ensure that all work to remediate is visible and trackable.
• Participate in the governance of ongoing technology control assessments.
• Ensure compliance with regulatory and industry standards such as SOC 2, ISO 27001, and GDPR.
• Work closely with senior leaders in IT operations, cybersecurity, and business units to ensure effective technology risk management and alignment with business objectives.
• Align with key project leads to ensure that all risks are understood and documented prior to moving to production.
• Align with key technology and cyber projects to ensure that risks are adequality unidentified and tracked through remediation.
• Collaborate with other internal teams such as legal, compliance, and internal audit to ensure that technology risk is effectively managed across the organization.
• Keep up to date with emerging technology risks and recommend appropriate risk management strategies to the senior leadership team.
• Partner with operational leaders in focus areas of migration, resiliency, lifecycle management, patch management, and other core infrastructure program.
• Provide oversight and tracking for multiple board and committee level dashboards for Technology and Cyber.

Key Requirements:

• 10+ years of experience in technology risk or audit management, with 3+ years management role.
• Strong knowledge of technology risk management frameworks, standards, and regulations such as ITIL, COSO Enterprise Risk Framework, NIST Cybersecurity Framework, COBIT, and PCI DSS.
• Experience in building presentations and reporting for board level executives and working under tight deadlines.
• Experience working with cross-functional teams and senior leaders in IT, cybersecurity, and business units.
• Excellent communication and presentation skills with the ability to communicate complex technical risks to non-technical stakeholders.
• Past experience reporting to Technology Risk Officer or CISO is preferred.
• Relevant industry certifications such as ITIL, PMP, CBCP, CISA, CRISC, CISSP, or equivalent.
• Consultative experience a plus.
• Bachelor’s/University degree or equivalent a must.

Benefits We Offer· Generous paid time off in your first year, increasing with tenure.· Up to 16 weeks 100% paid parental leave after one year of employment.· Paid sick time to care for yourself or family members. · Education assistance and extensive training resources.· Do Good Program: Paid volunteer days & donation matching.  · Competitive 401k & Employee Stock Purchase Plan with company matching. · Health & wellness benefits, including discounted Gympass membership rates.· Medical, dental & vision insurance for you, spouse/partner & dependents.· Learn more about our benefits: http://bit.ly/41Yyc3d.

All Dun & Bradstreet job postings can be found at https://www.dnb.com/about-us/careers-and-people/joblisti