Lead Control Management Officer

• Lead complex initiatives designed to mitigate current and emerging risks with broad impact
• Act as key participant in monitoring evaluating and measuring the impact of decisions practiced in Control Management functional area
• Monitor moderately complex business specific programs and provide risk management consulting to support the business in designing and implementing riskmitigation strategies
• Monitor measure evaluate and report on the impact of decisions and controls to the relevant business group or functional area
• Develop and implement risk monitoring and risk reporting processes and controls
• Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations and provide guidance in developing and implementing riskmitigating strategies
• Lead Control Management project or virtual teams

Required Qualifications International:

• Experience in Risk Management Control Management or equivalent demonstrated through one or a combination of the following: work experience training military experience education

Required Qualifications:

• 10 years of Risk Management or Control Management experience or equivalent demonstrated through one or a combination of the following: work experience training military experience education.
• One or more certifications such as CISSP CRISC CISA CISM and CGEIT.
• Ability to identify risk and controls and conduct root cause analysis to create remediation plans remediation success criteria sustainability criteria and control documentation.
• Knowledge and experience in third party risk BCP SDLC Availability Management Configuration Management Access Control Segregation of Duties Vulnerability Management and other domains in technology and information security.
• Working knowledge of Risk Management Framework (RMF) concepts across risk types (regulatory financial crimes credit operational etc.) and risk quantification (financial impact to organization risk exposure levels etc.).
• Excellent communication skills (verbal written and interpersonal); ability to concisely articulate complex concepts in a clear manner. Ability to translate technical language into plain business language and to translate business requirements into technology initiatives.
• Strong analytical skills with high attention to detail and accuracy.
• Ability to interact with all levels of an organization.
• Strong interpersonal influencing and communications skills with an ability to interact effectively with stakeholders.
• Ability to organize and manage multiple priorities. Ability to prioritize work meet deadlines and achieve goals in a dynamic and complex environment.
• Ability to work independently.

Desired Qualifications:

• Knowledge and understanding of technology regulatory guidance and industry frameworks or standards FFIEC NIST ISO COBIT PCI ITIL SOX SOC.
• Ability to find data analyze organize and identify themes in large amounts of data. Also to create action based on data analysis and KPI/KRI metrics and build presentations.
• Understanding of audit lifecycle and methodology