IT Risk Manager

To Apply for this Job Click Here

ROLE: IT Risk Manager
100% remote possible – Chicago preferred
September start date – 6 month contract, FTE possible

Heitmeyer Consulting is looking for an IT Risk Manager to support a global insurance client based in Chicago. 

• Will be responsible for supporting the IT risk strategy and roadmap, implementing and/or enhancing capabilities, and managing ongoing operations.
• Will oversee continuous improvements to risk management practices and controls to ensure Information technology and cyber risks are effectively managed and mitigated.
• Will report directly to the Vice President of IT Risk Management.

Skills – must have:

• IT Audit / IT SOX – 6-10 years experience
• IT Risk Management
• ITGCs
• GRC – Governance, Risk and Compliance regulations (e.g., NY DFS, CCPA, GDPR, HIPAA)
• Enterprise risk and security frameworks including NIST, COBIT, ISO, CSA, ITIL, SCF preferred
• Data Privacy / Data Security
• Security Information and Event Management (SIEM)
• Strong communication – written & verbal
• Stakeholder management
• Leadership and teamwork

Skills – highly preferred:

• Financial institution / Insurance
• Big 4 background
• Relevant Certification(s) – e.g., CISO, CISM, CISSP, CRISC, CPA, CIA, Data Privacy

Role description:

• Manage the needs of IT risk management function and align to our client’s operating model and ERM framework.
• Continually enhance IT risk management roadmap focused on highest priority risks.
• Strengthen IT Risk Department Capabilities
  • Define and maintain the IT control environment
  • Document IT policies and procedures required to meet data security, audit, regulatory, and compliance requirements.
  • Develop tools (GRC) to maintain IT Risk Register more efficiently and effectively.
  • Regularly schedule IT risk assessment discussions with stakeholders.
  • Continue the identification of Key Risk Indicators (KRIs).
  • Assist the IT Key Risk Indicator Dashboard using data provided by stakeholders.
  • Prepare materials for the IT Risk Steering Committee and facilitating quarterly meetings.
  • Coordinate IT risk management activities with Enterprise Risk Management (ERM) team
  • Assist in reviewing and enhancing policies and procedures.
• Manage internal / external audit requests and remediation efforts including IT SOX.
• Support corporate, regulatory, compliance and information security initiatives.
• Continuously identify emerging risks and design appropriate mitigation strategies.
• Manage aspects of System Development Lifecyle (SDLC) policy and integrating steps with PMO.
• Deliver a positive customer experience to all internal stakeholders.

Heitmeyer Consulting is an equal opportunity employer and we encourage all qualified candidates to apply.  Qualified applicants will be considered without regard to minority status, gender, disability, veteran status or any other characteristic protected by law.
 

To Apply for this Job Click Here