Lead Security Engineer - Risk Product Security
Lead Security Engineer - Risk Product Security
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Shape the future of product delivery while crafting solutions that enhance and optimize customer experiences. Lead end-to-end processes manage dependencies and liaise with stakeholders as part of a team at the forefront of innovation.
Description
As a Lead Security Engineer with in Cybersecurity & Tech Controls team you will lead the integration of risk management practices into our organization thereby enhancing the security and compliance of our products. You will also drive closure of risk gaps within our products support execution of audits and assessment and enhance the efficiency of our Product Security Teams programs. Applying a broad knowledge of technical principles practices and theories is essential to developing innovative solutions along with leveraging analytical reasoning and adaptability skills to navigate through ambiguity and change. Your strong communication abilities will enable you to effectively collaborate with cross-functional teams and manage stakeholder relationships ensuring alignment on project objectives and governance. By optimizing resources and managing risks you will contribute to the successful delivery of high-impact projects that shape the future of the firm.
Job responsibilities
- Guide coach and oversee the creation and modification of control procedures (CPs) rather than writing them from scratch.
- Engaging with Product Security Leads (PSLs) to ensure adherence to the GTPC (Global Technology Policies & Controls) process; Ensuring the development of high-quality controls for Products.
- Assisting with normalizing language wording and measurement for consistency across controls; Ensuring that controls are maintained regularly reviewed and properly re-certified; Understanding which control procedures apply to products during the planning and building stages and coaching teams on how to identify relevant controls.
- Effective integration and engagement with Audit. This involves assisting with the accuracy of Request for Information (RFI) reviews facilitating communication by addressing questions to and from the audit team and clarifying the audit scope.
- Emphasizes Compliance from the Start. While not the Control Manager the Risk Lead provides valuable advice in improving the RAS (Risk Assessment Structure) assists in mapping risks to control procedures (CPs) and addressing CORE (Control and Operational Risk Evaluation) issues.
- Leverage strong communication skills to validate controls and ensure their effectiveness.
Required qualifications capabilities and skills
- Formal training or certification on Product delivery management concepts and 5 years applied experience
- Expertise in technology risk management information security or a related field with a focus on risk identification assessment and mitigation.
- Proficient in risk management frameworks industry standards and regulatory requirements specific to the financial industry.
- Strong critical thinking skills.
- Excellent written and verbal communication abilities.
- Proficient knowledge in data security risk assessment and reporting control evaluation design and governance.
- Proven track record of implementing effective risk mitigation strategies
Preferred qualifications capabilities and skills
- Knowledge of the product development life cycle design and data analytics
Employment Type
Full-Time
