IT Risk Analyst and Control Tester - Diverse Linx

Stamford, CT

About the Job

Job Duties

As a senior team member in the Information Technology Risk department within Webster Technology, the incumbent will support the design, implementation, and lead elements of execution of risk functions for Webster Technology. These functions include Sarbanes Oxley (SOX) Processes, Assessments, risk item resolution or acceptance tracking, and risk awareness and training.

Specific duties are varied and may include any of the following:

Webster Technology Risk Strategic Initiatives

Contribute to and may take a project leadership role for key initiatives supporting first line risk programs

Information Risk and Control Framework
Assist in the design, implementation, and execution of the Risk Management framework processes within Webster Technology.
In collaboration with IT process owners, lead the day-to-day activities supporting identification of material risks associated with Webster Technology activities
Consult and guide technology and process owners with the establishment of necessary operating procedures and technical standards to mitigate these risks and comply with policies and standards.
Assist in assessing control design, self-assessment processes (RCSA), control testing, and identifying KPIs and KRIs. Support the maintenance of the overall Webster Technology process taxonomy.
Participate in the integration with the selected CIO Group GRC platform as needed.
Take a leading role in increasin risk awareness throughout the organization.

Information Risk Aggregation and Reporting

Contribute to the implementation and execution of integrated and automated Webster Technology risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required. Contribute to the development of reports through appropriate committees

Regulatory (Including Sarbanes Oxley (SOX))

In collaboration with the second line, monitor for new regulatory guidance associated with Webster Technology activities.
In collaboration with the second line, monitor for new activities, processes or technologies and assess potential risk impact
Support regulatory exams in Webster Technology. Ensure process owners maintain appropriate documentation such that Webster Technology is always exam ready.
Collaborate with enterprise risk management and legal to document management responses to regulatory exam findings.
Design and execute control testing programs to support compliance efforts as assigned

General Requirements

Able to develop the ability to plainly describe risk concepts to first line operational personnel.
Synthesize complex and potentially conflicting data into simple, actionable reporting.
Develop familiarity with technology, to support learning emerging technologies and how regulatory requirements may evolve.
Strong written and verbal communication skills -- ability to collaborate and communicate up/down and across the organization with internal/external partners.
Ability to resolve conflicting opinions without compromising high quality risk management.
Bachelor s degree.
10+ years of experience in Risk, Audit or Security functions, preferably in technology and in a banking environment.
CISA, or other auditing or risk management certification is desired. Ability and desire to obtain relevant certification(s) strongly preferred.

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.

Source : Diverse Linx