Banking Risk Technology Risk Engineer

Job Description: Senior Technology Risk Engineer

Responsibilities:

1. Program Delivery:

   • Execute all first line of defense risk activities impacting Information Technology and Information Security within Flagstar.
   • Design and implement specific elements of the Information Technology and Security risk program to mitigate enterprise IT and security risks.
   • Act as a role model and mentor to junior team members.

2. Risk Program Implementation:

   • Engineer the implementation of components of the Information Technology Risk Program including external compliance internal audit security vendor management and operational risk.
   • Conduct internal and external compliance technology audits and regulatory exams representing Information Technology throughout the audit lifecycle.

3. Risk Management:

   • Execute Risk Management functions for IT meeting Enterprise Risk Management program elements and compliance requirements.
   • Conduct Risk Controls SelfAssessment process for Information Technology and Information Security.

4. Awareness and Training:

   • Deliver Awareness and Training for Risk Program elements to enhance understanding and ensure risk responsibilities are carried out throughout the enterprise.

5. Governance and Control:

   • Design and implement Governance Risk and Control frameworks and systems based on recognized best practices.
   • Ensure compliance with applicable federal state and local laws and regulations.

6. Engagement and Coordination:

   • Engage with the CISO organization to vet issues from external vendor reviews within the IT Organization.
   • Coordinate IT Technology Risk Acceptance workflow process from risk origination to final approval.

Requirements:

• Bachelors Degree in a related field preferred.
• Professional certifications such as CISSP CISM CISA or CRISC preferred.
• Minimum 6 years of experience in technology audit Information Security or Information Technology.
• 2 years of SOX IT control execution or testing IT auditing experience or IT risk.
• Strong understanding of IT audit principles general IT controls and IT organization business processes.
• Experience in Risk and Control Self Assessments Audits or exams for technology or information security.
• Proficiency in industry standard frameworks such as COBIT ISO NIST and SANS.
• Excellent communication skills with the ability to present ideas to senior management.
• Demonstrated ability to work effectively across functional and organizational lines.
• Strong problemsolving skills and ability to meet time commitments