Risk and Compliance Management is a critical function provided by Cipher Integrity which assists Business and Information Technology areas in identifying and evaluating key operational risks and controls, and recommending enhancements to their controls.
Key qualities needed to fulfill this role include:
- Dependability - Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure, and meets attendance/punctuality requirements.
- Interpersonal Skills - Listens actively to others, builds strong relationships, is flexible/open-minded, solicits performance feedback and handles constructive criticism. Communicates well both verbally and in writing.
- Job Knowledge - Understands duties and responsibilities, has necessary job knowledge, has necessary technical skills, keeps job knowledge current, is in command of critical issues. Consistently achieves greater level of expertise in his or her field. Identifies and communicates new business development opportunities.
- Productivity - Manages a fair workload, volunteers for additional work, prioritizes tasks, develops good work procedures, manages time well; handles information flow.
- Self-Development - Seeks out and accepts feedback, is a proactive learner, takes on tough assignments to improve skills, keeps knowledge and skills up-to-date, turns mistakes into learning opportunities.
- Teamwork - Meets all team deadlines and responsibilities, listens to others and values opinions, helps team meet goals, welcomes newcomers and promotes a team atmosphere.
- Trust - This position requires the employee to work remotely. This individual must show self disipline and the ability to stay focussed on the job at hand.
Responsibilities:
- Managing and/or facilitating assessments including information security, business, compliance, etc.
- Communicating with executive management, various committees, and others, as required, to discuss identified risks and opportunities for improvement within our control environment.
- Working with management to define and prioritize remediation efforts, tracking remediation activities, and inspecting/validating solutions that have been implemented, where appropriate.
- Acting as a liaison for parties who perform external assessments of control environments, including auditors, examiners, regulators, and client contacts.
- Possess a good understanding of appropriate leading-edge governance-enabling technologies.
Demonstrated business experience and expertise in the following areas of Risk and Compliance:
- Information Technology
- BCP/DR SDLC
- Cyber security and Incident Response
- Risk Management Strategies
- Information Security Strategy, Assessment, and Testing
- GLBA and Financial Information Privacy
- Vendor Management
- Cobit 5 and NIST Framework
- FFIEC/HIPPA
Desirable Certifications:
- Certified IS Auditor (CISA)
- Certified Information System Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Cisco Certified Security Practitioner (CCSP)
- Bachelors degree in computer science, information systems, engineering, business administration or a related field is required.
- Minimum of 10 years of experience with related to information security policy, standards, architecture, technology and programs.