Manager, Information Security Risk

About Acrisure

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more.

In the last eleven years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Our culture is defined by our entrepreneurial spirit and all that comes with it: innovation, client centricity and an indomitable will to win.

Responsibilities:

• As the Information Security Risk Manager, you will become an integral part of our dynamic Governance, Risk, and Compliance (GRC) team dedicated to safeguarding the organization. Your primary responsibility is to lead the third-party risk assessment program while also providing support in managing SOC2 assessments, conducting policy reviews, and evaluating the impact of regulatory changes. You will guide a talented team focused on securing Acrisure's information in an ever-changing landscape. Moreover, you will benefit from collaborating with and learning from experienced information security experts who are specialists in their respective areas.

• Provide leadership and direction for the entire third-party risk assessment program, overseeing risk assessment strategies and ensuring alignment with organizational objectives and priorities.

• Develop and maintain strong relationships with key stakeholders, including senior leadership, business units, legal, compliance, and IT teams, to facilitate smooth third-party risk management processes.

• Stay abreast of relevant regulatory requirements, industry standards, and best practices to ensure the program remains compliant with all applicable laws and regulations.

• Conduct comprehensive third party risk assessments, analyzing security policies, procedures, controls, and compliance with regulatory requirements. Perform in-depth technical assessments of third-party solutions, evaluating compatibility with our network infrastructure and data handling practices.

• Collaborate and build relationships with different business partners and provide guidance regarding program requirements on the onboarding and management of third-parties.

• Assist with the compilation and reconciliation of third-party reporting data for internal reports.

• Drive ongoing enhancements to the third-party risk assessment program, identifying areas for improvement and implementing effective solutions.

This description is not meant to be all-inclusive and may be modified from time to time at the discretion of management.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Requirements

• A seasoned professional with 5+ years of progressive experience in IT security

• Proven expertise in managing timelines and deliverables effectively.

• Strong leadership skills with the ability to inspire and guide a team of security professionals.

• Excellent communication and interpersonal skills, with the ability to engage effectively with all levels of the organization and external partners.

• Able to work independently and enjoy a high degree of interaction with team members

• Ability to contribute to a collaborative environment by consistently demonstrating teamwork, high motivation, positive behavior and effort to achieve goals and objectives

• Self-motivated and driven

• Maintain a sense of urgency and ability to work with and meet deadlines

• Demonstrate effective written and verbal communication, including the ability actively listen, and problem solve with minimal assistance

• Demonstrates excellent time management and prioritization skills

• Attention to detail and commitment to a high level of accuracy

• The ability to multi task, prioritize, work independently, and use discretion surrounding sensitive information

• Ability to maintain a professional demeanor and positive attitude

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Benefits and Perks:

<