This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Risk Manager, Insider Threat represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern. This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of key cybersecurity domains of Insider Threat, Threat Detection, and Incident Response. This role will contribute to the imposter and candidate integrity working groups and create materials for the conduct risk council.
Job Responsibility:
Provide advisory, oversight, and effective challenge to the 1st Line of defense
Provide technical assessments of cybersecurity controls design and effectiveness
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed
Stay current on emerging cyber threats and potential implications to the firm
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups
Proven track record of leading, mentoring, and influencing others
Ability to communicate clearly in written and verbal form
Ability to manage multiple projects while maintaining superior results
Ability to work individually and cross-functionally
Execution oriented and a self-motivator
Requirements:
Bachelor’s degree or military experience
At least 3+ years of experience in the financial services industry or highly regulated industry (healthcare, energy, telecommunications)
At least 3+ years of experience in Insider Threat, including identifying imposters and fraudsters
At least 2+ years of experience in Incident Response within a Security Operations Center
At least 2+ years of experience with User and Entity Behavior Analytics (UEBA) or Security Incident and Event Management (SIEM) platforms
At least 2+ years of experience defining or tuning rules in UEBA and SIEM platforms
At least 2+ years of consulting, audit, or risk management experience
Nice to have:
2+ years of Threat Intelligence experience, including the curation and operationalization of threat intelligence feeds
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1
Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
or Certified in Risk and Information Systems Control (CRISC)
Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)
What we offer:
comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)