Director, Information Technology Risk

Reporting to the SVP, Security and IT Operations, this individual will oversee and manage eMoney's IT risk management program on third party service providers, Internal and External audits and client security requests and risk assessments in accordance to eMoney Advisor standards. This individual is responsible for managing and executing third party risk assessments, ensuring audit compliance, and responding to client security due diligence requests.

Job Responsibilities

• Lead a team of analysts responsible for providing governance and reduction of risk to eMoney Advisor.
• Engage with all areas of the business to ensure compliance with required assessments per eMoney Advisor policy and procedures
• Lead the documentation and formalization of the Information Technology Risk Management process and program.
• Oversee and drive all aspects of the risk assessment process of third-party providers
• Manage, review and assess completed questionnaires and supporting fieldwork materials to ensure they are complete and meet eMoney Advisor expectations
• Schedule and lead assessments and be responsible for providing the overall IT Risk expertise
• Identify control breakdowns and vulnerabilities within third-party providers and eMoney Advisor business units
• Maintain eMoney Advisor's risk register, track identified issues and oversee the remediation efforts of those identified issues.
• Document findings and work with business owners to resolve those findings through remediation plans or through risk acceptance approvals
• Escalate issues associated with third parties and eMoney Advisor Business units to Senior Management as needed
• Identify opportunities for process improvements to deliver increasing operational efficiency in the processes
• Identify opportunities for improving third party risk posture as well as eMoney Advisor third party risk management processes, including expanded monitoring, KRI tracking, etc.
• Manage all other various Information Technology Risk Management program initiatives

Requirements

• Bachelor's degree in Management Information Systems, or a related discipline, or equivalent work experience required
• Should have 15+ years of IT related experience.
• 10+ years of experience in a Leadership role within IT Risk management, audit, or equivalent
• Experience managing Teams
• Travel Requirements: 25%

Skills

• Proficient technical skills, including: audit, business analysis, change management, IT Risk Management, operation systems and data sources knowledge, performance metrics and reporting, technical problem resolution, project management, and vendor management
• Proficient working knowledge within the following risk domains/technologies: Database and application security, IDS/IPS technologies, System/Access Administration, Firewall technologies, Network Architecture, Security Event Logging & Monitoring, Key Management/Tokenization, Database/Application/Network Layer Secure Protocols, Physical and Environmental Security, Secure Software/Code Development, Change Management, Vulnerability Management
• Excellent verbal and written communication skills, including the ability to effectively lead discussions and meeting
• Proficient risk assessment, interpretation, analytical and negotiation skills.
• Excellent organizational skills
• IT Risk Management/Audit industry certification (such as CISSP, CISA, CRISC, etc.) preferred

The salary range for this position is $159,000 - $202,000; commensurate salary to be determined based on skills, professional background and expertise. This position is also eligible, pursuant to applicable eMoney policies, for the annual bonus program, retirement contributions, health insurance, sick leave, parental leave and paid time off.