Manager – Information Security Governance, Risk & Compliance

Company

Federal Reserve Bank of Minneapolis

Are you looking to work in a place you think and feel your ideas are heard, your passion for technology resonates with your colleagues? Do you have thoughtful, supportive and impactful people leadership skills and progressive experience in security governance, risk and compliance?

The Federal Reserve Bank of Minneapolis is looking for an experienced Information Security professional to lead the Bank’s Security Governance, Risk and Compliance function.

You will provide leadership and expertise to manage and develop a team of information security analysts and will have the have the opportunity to lead and participate in transformational cybersecurity initiatives within the Ninth District and across the Federal Reserve System.

The Bank believes in flexibility to balance the demands of work and life while also recognizing the necessity of connecting and collaborating with our colleagues in person. Onsite work is an essential function of this position, and you are expected to be in the office two days per week for meetings and team collaboration. To be considered you must be a US Citizen.

The Bank believes in flexibility to balance the demands of work and life while also recognizing the necessity of connecting and collaborating with our colleagues in person.

Onsite work is an essential function of this position, and you are expected to be in the office two days per week for meetings and team collaboration.

To be considered you must be a US Citizen. This is not a remote position.

Responsibilities: 

• Oversee execution of information security governance, risk, and compliance activities for the district in alignment with System strategies and policies. 

• Engage with leaders and peers within the district, across the System and within the industry to ensure the Ninth District’s information security program priorities and services are aligned with organizational requirements, business aspirations and industry best practices. 

• Partner with business units to facilitate information security risk management processes and empower them to own and accept the level of risk they deem appropriate for their specific risk appetite. 

• Monitor and report on compliance with security policies and standards including enforcement across all information systems.

• Work as a liaison with legal and procurement departments to establish mutually acceptable contracts and service-level agreements that account for Information Security requirements.

• Develop and evaluate the performance of staff, which includes managing staff to identify developmental assignments and training opportunities, working with individuals on their career goals, delegating responsibilities, providing feedback and evaluating performance on any of the preceding duties.   

• Execute the full cycle of employment matters, including but not limited to those involving hiring, retention and performance optimization, salary recommendations, and decisions related to the termination of employment, as well as the documentation of these matters. 

• Establish objectives and key results for the team and adjust direction as needed to respond to organizational strategies and priorities.

• Maintain compliance with all applicable Department, Bank, and System policies, standards, service and quality measures, procedures, and controls to ensure exceptional operational integrity.

• Maintain a high level of knowledge of technical, operational, and policy issues within the industry and within the FRS to sustain high levels of ongoing operational quality and expertise. 

• Represent the Bank at all levels across the System including participating and/or leading security-focused workgroups at the System Level. Influence decisions and strategic initiatives through this participation and translate relevant activities into concrete action plans for the Bank. 

Qualifications: 

• Bachelor’s degree in information systems, computer science, or a related field with a minimum of (8) eight years of broad technical experience, with at (5) least five years in an information security role and at least (2) two years of direct supervision and people leadership responsibilities OR Master’s degree in information systems, computer science, or a related field with a minimum of (6) eight years of broad technical experience, with at (5) least five years in an information security role and at least (2) two years of direct supervision and people leadership responsibilities.

• Experience in NIST Cybersecurity Framework in addition to NIST security control, risk management and risk assessment frameworks and practices (e.g. 800-53, 800-37, 800-30) is preferred. Current or prev