It Risk Manager

Technology $110,600.00 - $182,400.00 1 Under general supervision, this position is responsible for identifying, assessing and establishing mitigation strategies within Corporate Technology while partnering and maintaining strong working relationship with key constituents (i.e.; IT risk management, Cybersecurity, business continuity, enterprise risk management, corporate audit, compliance, disaster recovery and information systems security) while driving solutions to reduce risk. This position partners with the Corporate Technology Management and Operations, Shared Services and Application Portfolio Management teams as well as with the Corporate Technology Value Streams including the Software Engineering Chapter and Architects to develop and maintain Recovery processes that are efficient and ensure compliance with defined standards through use of effective technology.
The work arrangement for this position is based on location.

• Identify and lead the appropriate subject matter experts to participate in the identification and analysis of risk scenarios.
• Manage the completion of risk analysis sessions and risk assessment activity within Corporate Technology.
• Key role in supporting Corporate Technology Circles in understanding and preparing for Business Resiliency events.

• Support the accountable parties in determining the appropriate treatment of identified risks.
• Insure plans are in place or all Corporate Technology Applications to mitigate risks including Vulnerability Management and Business Resiliency plans.
• Communicate and set direction for the acceptance of risk that is aligned with Travelers risk appetite.

• Inventory, assess significance, assign accountability, and develop appropriate monitoring for the LOB control environment.
• Meet compliance requirements to perform testing of Business Resiliency environment.
• Partner with assigned Circle representatives to ensure alignment and support in understanding and complying with best practices and standards for Cybersecurity and Risk Management.
• Partner with Enterprise Cyber and Technology reps to understand and influence response to emerging risks.

• Identify and obtain the data required for consolidated metrics and reporting.
• Prepare LOB specific reporting dashboards and metrics.

• Create operational efficiencies in the Business Resiliency and ITRM processes through effective use of automation.

• Support the education and awareness of Business Resiliency and ITRM principles, concepts and methodologies across Corporate Technology.
• Attend required Business Resiliency and ITRM training sessions.

• Facilitate the communication, education and awareness of key IT Risk Management initiatives and coordinate feedback to be provided back to IT Risk Management and Corporate Technology Leaders.
• Responsible for participating in audit planning and tracking, business resiliency and records retention certifications.
• Responsible for compliance within Corporate Technology in understanding and applying policies, standards and procedures across the IT environment.
• Responsible for compliance within Corporate Technology in understanding the Business Resiliency and ITRM processes.
• Represent Corporate Technology in cross lob forums related to Cybersecurity.

• Will be called upon to provide innovative risk management solutions.
• Other duties as assigned.

• Six years of experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity preferred.
• Bachelors degree in Technology or a related field preferred.
• Experience leading technical teams preferred.
• Technical Knowledge - Advanced:
• Able to understand detailed issues around business continuity, security, and overall risk in IT.
• Able to have enough expertise to drive a solution and solve issues, addressing risk.
• Business Knowledge & Partnership - Advanced:
• Creates an atmosphere where business partner's issues are dealt with professionally, and in a timely manner.
• Suggests solutions that make sense and improve the performance of the assigned systems.
• Ensures customer's perspective is understood to optimize system(s) support of the business goals.
• Communicates openly and effectively in a manner consistent with the audience.
• Ensures that reports are precise, timely and accurate.
• Problem Solving & Decision Making - Advanced:
• Demonstrates sound analytical and diagnostic skills dealing with issues that are loosely defined and/or where information is available but must be further manipulated.
• Once decisions are made, is able to follow the management plan and direct activities to obtain intended results.
• Takes input from several sources, decides if all the information needed is available and moves to a decision.
• Openly and directly confronts conflict until resolved.
• Team Orientation - Advanced:
• Maintains effective partnerships across the organization and is able to influence senior management, peers and subordinates through an inclusive style and recognition of their abilities and knowledge.
• Balances team and individual responsibilities.
• Exhibits objectivity and openness to others' views.
• Gives and welcomes feedback.
• Puts success of team above own interest.
• Leadership - Intermediate:
• Supports a distinct business unit or several smaller functions.
• Responsibilities are assigned with some latitude for setting priorities and decision-making using established policies and procedures.
• Results are reviewed with next level manager for clarification and direction before proceeding.
• Planning and Project Management - Advanced:
• Identifies those unit tasks that are most important and maintains a clear sense of priorities and the larger picture.
• Anticipates and effectively responds to changes in workload and resources.
• Is able to influence management, peers and subordinates through an inclusive style and recognition of their abilities and knowledge.
• Communications - Advanced:
• Strong communications skills are required to work across the organization, and several corporate functions.
• Financial Awareness - Intermediate:
• Has the ability to frame risk issues in a risk business case / terms, to help priorities projects and value.
• Human Resource Management - Basic:
• Demonstrates good interpersonal skills by displaying an understanding of the needs and perspective of others.
• Able to balance the workload of team members and supervise individuals of varying abilities.
• Able to identify the talents of others and match them to the tasks that will best suit the unit goals and/or provide growth for the individual.
• Able to assess and identify employee development and put together a training plan for the individual.
• Responsible for the accurate and timely completion of staff performance evaluations and development planning.
• Demonstrates a capacity to recognize, value and respect differences across a diverse workforce.
• Proficiency level definitions:
• Basic - Demonstrates basic knowledge and ability; can apply the competency in common/familiar situations that present limited difficulties.
• Intermediate - Demonstrates solid knowledge and ability; can apply the competency, with minima; or no guidance, in the full range of typical situations. Requires guidance handling novel or more complex situations.
• Advanced - Demonstrated advanced knowledge and ability, and can apply the competency in new or complex situations. May guide other professionals.
• B.S. in IT related discipline or similar degree preferable.
• General knowledge and Work experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity, however other IT disciplines are eligible, for typically a minimum of 2 years combined with 3 years IT experience preferred.
• Certified in Risk and Information Systems Control (CRISC) designation preferred or attained within 2 years.

• Three years of Technology experience required.
• One year of IT Risk Management experience required.