Senior InfoSec Manager - Risk and Compliance

Company

Federal Reserve Bank of Richmond

About the Opportunity

Our National IT Office of the Chief Information Security Officer’s (OCISO) Operations Risk & Compliance Management team has an immediate opening for a Senior Information Security Manager.

As Senior Manager, you will report to the Compliance Officer and will play a key role in supporting the team’s major objectives, including evaluating and managing consistent adherence to information security controls and assessing risk identification and assessment / mitigation activities. You will also work with clients and on cross functional teams, as well as conduct and provide research and analysis of technical data, to develop and present recommendations and solutions within risk and compliance areas.

About the Opportunity

Our National IT Office of the Chief Information Security Officer’s (OCISO) Operations Risk & Compliance Management team has an immediate opening for a Senior Information Security Manager. As Senior Manager, you will work remotely and will report to the Compliance Officer and will help support the team’s major goals, including evaluating and managing adherence to information security controls and assessing risk identification and assessment / mitigation activities. You will also work with clients and across teams to conduct and provide analysis of technical data, to develop and present recommendations and solutions within risk and compliance areas.

What You Will Do:

• Participate in and conduct information system authorization activities for all technology components based on established technology standards.

• Perform risk analyses of operational issues using established methodologies and tools within risk and compliance as a second level support.

• Work with clients and other resources to assess current information security capabilities, identify customer needs, and recommend controls improvements within risk and compliance areas.

• Provide support and collaboration in completing risk analyses, provide ad-hoc reporting, information or process mapping, and alignment of technology or operational-related resources and present issues and outcomes in written and verbal format to senior management.

• Participate in initiatives to address process improvements, IT/IS policy/risk matters, or compliance issues, and contribute to best practices and how to improve current practices and monitoring capabilities.

• Provide support to the Operations Risk and Compliance team as a product owner in the development of program increment plans and sprints.

• Provide consultation and guidance on the implementation of and adherence to the FRS, FedRAMP, and FISMA security assurance policy and procedures.

• Foster a culture of innovation and learning, engagement, and appropriate risk taking.

• Mentor staff, motivate a high-performing team of domain experts, and lead program effectiveness. 

Qualifications:

• Demonstrated senior managerial experience and motivational skills to manage staff and management, direct activities of assigned unit(s), direct, participate in and implement complex operating or business plans, orchestrate team efforts to provide high quality deliverables, meet department goals and make strategic and notable contributions in accomplishment of goals. Empower staff to resolve issues and position themselves for success through training, and responsibilities.

• Bachelor's Degree or equivalent experience with 5+ years of relevant work experience in the security assurance domain.

• Advanced knowledge and application of NIST 800-53, FedRAMP, and FISMA.

• Progressive experience with the principles in information security, compliance, and IT risk management disciplines.

• Certification in one or more IS industry recognized certifications (such as CISSP, CISA/CISM, GIAC, CRISC, or CCSP etc.).

• Develop creative solutions through collaboration and negotiation.

• We may ask you for extended work hours and occasional travel including overnight stays.

Discover the Reason Why So Many People Love It Here!

When you join the Richmond Fed, not only will you find a challenging and purposeful career, you’ll also have access to a wide range of benefits and perks that support your health and wealth, including:

• Great medical benefits

• Pension and 401(k) with employer match

• Paid time off

• Tuition reimbursement

• Employee resource networks

• Paid volunteer leave

• Flexible work options

• Onsite amenities that make working here fun!

Other Requirements and Considerations:

• Candidates