Director, Information Technology Risk

Reporting to the SVP, Security and IT Operations, this individual will oversee and manage eMoney’s IT risk management program on third party service providers, Internal and External audits and client security requests and risk assessments in accordance to eMoney Advisor standards. This individual is responsible for managing and executing third party risk assessments, ensuring audit compliance, and responding to client security due diligence requests.

Job Responsibilities

• Schedule and lead assessments and be responsible for providing the overall IT Risk expertise
• Document findings and work with business owners to resolve those findings through remediation plans or through risk acceptance approvals
• Engage with all areas of the business to ensure compliance with required assessments per eMoney Advisor policy and procedures
• Escalate issues associated with third parties and eMoney Advisor Business units to Senior Management as needed
• Identify control breakdowns and vulnerabilities within third-party providers and eMoney Advisor business units
• Manage all other various Information Technology Risk Management program initiatives
• Manage, review and assess completed questionnaires and supporting fieldwork materials to ensure they are complete and meet eMoney Advisor expectations
• Lead a team of analysts responsible for providing governance and reduction of risk to eMoney Advisor.
• Identify opportunities for process improvements to deliver increasing operational efficiency in the processes
• Oversee and drive all aspects of the risk assessment process of third-party providers
• Lead the documentation and formalization of the Information Technology Risk Management process and program.
• Maintain eMoney Advisor’s risk register, track identified issues and oversee the remediation efforts of those identified issues.
• Identify opportunities for improving third party risk posture as well as eMoney Advisor third party risk management processes, including expanded monitoring, KRI tracking, etc.

Requirements

• 10+ years of experience in a Leadership role within IT Risk management, audit, or equivalent
• Experience managing Teams
• Bachelor's degree in Management Information Systems, or a related discipline, or equivalent work experience required
• Travel Requirements: 25%
• Should have 15+ years of IT related experience.

Skills

• Proficient technical skills, including: audit, business analysis, change management, IT Risk Management, operation systems and data sources knowledge, performance metrics and reporting, technical problem resolution, project management, and vendor management
• Proficient risk assessment, interpretation, analytical and negotiation skills.
• Proficient working knowledge within the following risk domains/technologies: Database and application security, IDS/IPS technologies, System/Access Administration, Firewall technologies, Network Architecture, Security Event Logging & Monitoring, Key Management/Tokenization, Database/Application/Network Layer Secure Protocols, Physical and Environmental Security, Secure Software/Code Development, Change Management, Vulnerability Management
• IT Risk Management/Audit industry certification (such as CISSP, CISA, CRISC, etc.) preferred
• Excellent verbal and written communication skills, including the ability to effectively lead discussions and meeting
• Excellent organizational skills

The salary range for this position is $159,000 - $202,000; commensurate salary to be determined based on skills, professional background and expertise. This position is also eligible, pursuant to applicable eMoney policies, for the annual bonus program, retirement contributions, health insurance, sick leave, parental leave and paid time off.