This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
Primary Responsibilities:
• Support the Bank's Information Technology (IT) and Information Security (IS) Risk Management framework using industry leading practices, e.g NIST Cybersecurity Framework (CSF) and COBIT
• Partner with IT, IS, and other business unit teams, as appropriate, to execute the in-scope risk and compliance assessments, e.g., Inherent Risk Assessment (IRA), Operational Risk Assessment (ORA), FedLine Advantage Assessment, and Compliance Risk Assessments, regulatory gap assessments, and related design and operating effectiveness testing
• Document and communicate risk-based recommendations and support remediation efforts, including tracking and validation of corrective actions, as appropriate
• Provide the ongoing oversight and maintenance of the IT and IS risk, control, and regulatory requirements inventory, as applicable
• Assist the Enterprise Risk Management (ERM) management team on the periodic analysis and reporting of IT and IS risk data, e.g., IT and IS risk metrics, system changes, technology exceptions, incidents and tickets, and operational event reporting (OER)
• Escalate significant risks, control deficiencies, and compliance issues to the appropriate management, and monitor / validate corrective actions through resolution
• Assist the ERM management in mapping the Bank's IT, IS, and business process controls to the applicable regulatory requirements.
• Execute and document the risk management activities in the Bank's GRC system, LogicGate
• Participate and provide risk oversight and monitoring in the Architecture Assessment Review (AAR) and Architecture Review Board (ARB) processes for the applicable proposed new technologies or changes in existing technologies
• Ensure IT Risk Management documents, e.g., Policies and Procedures, are updated and maintained in LogicGate
• Support the Supplier Risk Management (SRM) team as needed on third-party security risk assessments and supplier incidents learn and use security monitoring tools, e.g., ProcessUnity and Black Kite, to support the SRM activities
• Execute other risk management activities, such as Records Management System implementation, GRC system enhancements, and periodic ERM application user access reviews, as deemed appropriate by management
• Collaborate with other assurance groups and senior management on broader enterprise wide initiatives by reviewing evidence, risk analyses, remediation updates, and subject matter expertise related to technology and cybersecurity risk management practices
• Provide independent challenge to management's risk assumptions, and develop practical, risk-based recommendations to strengthen control environments
Benefits:
Benefits
Full-time employees (working an average of 30 hours or more) are eligible to select from different benefits packages Packages may include medical, dental, and vision benefits, a 401(k) retirement savings plan with employer match (available after 1 year of employment), commuter benefits, employee discount and referral programs, and life and supplemental income insurance Paid sick leave is provided in accordance with applicable state and local laws.
Compensation
Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience, as well as the benefits package you select.
Work Authorization
ATR International, Inc cannot sponsor work visas (H-1B, F-1 STEM OPT with I-983, or similar) Candidates must have valid U.S work authorization.
ATR International, Inc is an equal opportunity employer We celebrate diversity and are committed to creating an inclusive environment for all employees.
Worksite address
san francisco, CA, 94199, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.