Distinguished, Risk Expert-Information Security (Tech Process & Controls)-Global Tech Assurance

Position Summary...

As a member of the Information Security (InfoSec) Global Tech Assurance team, you will be responsible for defining the methodology and approach to proactively mitigate technology risk in high-risk operational areas.  You will work alongside other InfoSec teams to provide confidence that operational technology controls for new or modified solutions are properly designed to meet objectives and mitigate risk as they are integrated into the production environment.  It will be necessary to collaborate with Technical teams to ensure timely resolution of control design gaps.  You will provide as needed assistance to stakeholders for audit preparedness. As a functional leader, you will support the team's strategy development.



About Our Team

In an environment where IT-related risks are on the rise and constantly changing, the ability to provide confidence that our operational technology controls in high-risk areas are designed and implemented effectively is paramount.   The Tech Assurance team collaborates with business partners and Global Tech teams to ensure new solutions are properly deployed and controlled to meet appropriate levels of technology policies and standards.  Our team is dedicated to maintaining a secure operating environment and preserving the trust of our customers, associates, and stakeholders.

What you'll do...

As a Distinguished Risk Expert, you’ll have the following responsibilities:

• Conduct risk assessments to identify potential control gaps in technology systems and processes.  Develop and implement strategies to mitigate identified risks.
• Develop and implement approach and methodology to evaluate the design of technology controls to ensure they effectively mitigate the risk they are intended for. 
• Guide technical teams to implement appropriate controls promptly to mitigate risks and address control design gaps effectively.
• Collaborate with the InfoSec Policy team to provide recommendations on technology control policies that need to be created or revised based on new technologies or solutions being integrated into the production environment.
• Work closely with cross-functional teams to ensure cohesive implementation of technology controls or common controls.
• Participate in the development and refinement of a standardized methodology for common controls.
• Establish collaborative relationships with other risk and compliance leaders (i.e. SOX, PCI, Security Standards Enforcement, Security Partners, etc.) to apply learnings from their programs in common processes and controls especially when common tooling/platforms can be leveraged.
• As necessary maintain comprehensive centralized documentation of technology controls, risk assessments, and control gap findings.
• Deliver regular updates and reports on the progress of technology control implementation projects, identified risks, control gaps, and outline corrective actions. 
• Stay updated on emerging threats, technologies, and regulatory changes. Proactively seek opportunities to enhance existing controls and implement new solutions.
• Gain an understanding of risk trends and themes within the organization, develop insights on those trends, and adjust the approach for evaluating control design effectiveness or conducting risk assessments as necessary.   
• Guide and mentor team members to follow established practices for the delivery of technology control services, meeting quality, speed, innovation and create impact. 

What you’ll bring…

• Experienced in assessing, designing, and implementing IT processes and cont