Application Security Risk Assessor

Responsibilities:

• Collaborate with other risk departments on Business as Usual (BAU) activities or projects to ensure information security risks and controls throughout the company are sufficiently assessed and managed


• Prioritize and perform risk assessments on new and existing applications and provide actionable recommendations for relevant risk treatments such as risk remediations or risk acceptances.


• Fully understand the information security controls and associated risks and clearly articulate them to technical and business stakeholders


• Continuously enhance and streamline processes and technology in the information security risk management space


• Take ownership and ensure effective completion of projects related to information security risk management with a focus on collaboration, relationship building and successful delivery


• Identify issues or enhancement opportunities with existing risk management tools and the risk register at the company and develop plans or share ideas on continuous improvements


• Independently complete risk assessments end-to-end, as needed, and continuously train stakeholders and junior staff about information security risks and controls.


• Perform other duties, as needed

Qualifications:

• CISSP, CISA, CISM, CRISC, or other Information Security-related certifications


• Extensive knowledge of Information Security Controls, risks and best practices in a large financial institution or banking environment


• In-depth knowledge of commonly used Banking applications, operating systems, databases, and IT infrastructure


• Experienced with various available Cloud Platforms including their related services and security components


• Strong knowledge of Cyber Security and Information Security best practices and industry frameworks


• Ability to take ownership of complex tasks and assign resources to complete the tasks timely


• Ability to lead members within the immediate team and other teams to accomplish complex projects as necessary


• Ability to independently execute risk assessment processes and complete the assessment cycles


• Have strong verbal, written communication, and presentation skills

Desired Skills:

• 8+ years of experience in Information Security Risk Management or Controls Testing

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.