Register
Recruit Create CV
Unfortunately, this job posting is expired.
Don't worry, we can still help! Below, please find related information to help you with your job search.
Related keywords
Some similar recruitments
Third Party Risk Manager - Hybrid (Charlotte/Minneapolis)
Recruited by U.S. Bank National Association 9 months ago Address , Minneapolis, 55413, Mn $87,465 - $113,190 a year
Third Party Risk Management - Risk Consultant
Recruited by U.S. Bank National Association 11 months ago Address , Minneapolis, 55402, Mn $87,465 - $113,190 a year
Jr. Cyber Security Analyst
Recruited by Saint Francis Ministries 11 months ago Address , Salina, 67401, Ks
Operational Risk Analyst Jobs
Recruited by StoneX Group Inc. 1 year ago Address Kansas City Metropolitan Area, United States
Cyber Security Analyst Jobs
Recruited by ECCO Select 1 year ago Address Kansas City Metropolitan Area, United States
Information Security Risk Analyst
Recruited by Blue Cross & Blue Shield of Mississippi 1 year ago Address , Flowood, 39232, Ms

Cyber Application Risk Manager (Remote)

Company

GEICO
Address , Chevy Chase
Employment type FULL_TIME
Salary $82,000 - $204,500 a year
Expires 2023-11-10
Posted at 9 months ago
Job Description
GEICO is a leading insurance provider in the United States, and we are committed to providing exceptional service and delivering innovative financial protection solutions to our customers. As part of our ongoing commitment to maintaining the highest standards of security and risk management, we are seeking an experienced and talented Cyber Application Risk Manager to join our Cyber Risk Management team. This is not a formal leadership role. As a Cyber Application Risk Manager, you will work closely with technical and business process teams to facilitate application risk assessments. Key responsibilities include:
Key Responsibilities:
  • Maintain a broad understanding of cybersecurity trends, threats, and best practices to ensure risk mitigation strategies remain current and effective.
  • Facilitate security onboarding process for new applications to GEICO.
  • Define and meet SLA expectations for assessments/re-assessments
  • Develop and provide training/guidance to stakeholders across the organization to promote a strong risk-aware culture.
  • Support the development and maintenance of risk management policies, standards, and guidelines.
  • Communicate and collaborate with internal and external teams, stakeholders, and leadership. Assist in the continuous improvement and maturity of the organization's application risk management framework, program, processes, and tools.
  • Identify risks associated with GEICO applications by conducting thorough risk assessments and due diligence; coordinate and perform risk re-assessment of existing GEICO applications to ensure risk and compliance is maintained and aligns with industry best practices and internal policies and standards.
  • Monitor, track, report assessment results for Control Owners; and escalate application risks to Senior Leadership.
  • Collaborate with other risk management professionals to share knowledge, best practices, and lessons learned.
  • Perform Application Onboarding and Application Risk Assessment/Re-Assessment tasks:
  • Develop and provide key reports and metrics on a periodic basis to Senior Stakeholders.
  • Perform any other job-related instructions, as requested, with reasonable accommodation.
  • Assist with maintenance of the GRC tool used by the team.
  • Experience with implementation and maturing of Cyber frameworks, NIST-CSF, ISO, MITRE ATTACK Framework, etc.
  • Extensive 1st and/or 2nd Line of Defense hands on experience along with Remediation Management.
  • Participate in continuous improvement initiatives for the team.
  • Recommend new (or changes to existing) policies and procedures for the general operation of the company and its risk program to prevent illegal, unethical, or improper conduct.
Qualifications:
  • Comprehensive understanding of cybersecurity principles, frameworks, and regulations (e.g., ITIL, NIST, MITRE, COBIT, COSO, HITRUST, SOC reports, CSF, ISO, GDPR, PCI, NYDFS).
  • Proven ability to manage multiple projects simultaneously and prioritize tasks based on urgency and impact.
  • Strong technical knowledge and diverse skillset to understand various technologies, systems, and potential risks.
  • Ability to work independently and strategically.
  • Excellent critical thinking, problem-solving, and decision-making skills.
  • Demonstrated expertise in identifying and analyzing risks and developing effective mitigation strategies.
  • Strong interpersonal and communication skills, with the ability to effectively collaborate with both technical and non-technical peers.
  • Experience working with application security and secure development practices.
  • Solid working knowledge of IT security and infrastructure controls.
  • Extensive hands-on experience with GRC tools.
  • Proven ability to assess application risk programs, evaluate organizational needs and implement required changes.
  • Ability to develop a rapport with all employees to cultivate an environment conducive to reporting possible policy violations/risks. Ability to competently follow through on investigating such potential violations.
  • One or more of the following certifications: CRISC, CISA, CISSP, CRISC or other related certification(s) a plus.
Experience:
  • Minimum 5-8 years of experience in IT risk management and/or audit experience in cyber risk management, preferably in the insurance and financial services industry.
Education:
  • Bachelor’s degree in Engineering, Computer Science, Information Security, or a related field
Certifications:
  • CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC ( Certified in Risk and Information Systems Controls ) or other relevant cybersecurity certifications are a plus.
Benefits:
As an Associate, you’ll enjoy our
Total Rewards Program
  • To help secure your financial future and preserve your health and well-being, including:
  • Tuition Reimbursement
  • 401(k) Plan
  • Paid Training and Licensures
  • Paid Vacation, Sick and Parental Leave
  • Premier Medical, Dental and Vision Insurance with no waiting period**
  • Benefits may be different by location. Benefit eligibility requirements vary and may include length of service.
**Coverage begins on the date of hire. Must enroll in New Hire Benefits within 30 days of the date of hire for coverage to take effect.
Annual Salary
$82,000.00 - $204,500.00
The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.