Lead IT Risk & Control

City National Bank • Permanent • North Carolina, United States • $53.56 - $91.22 / day • 1d ago

LEAD IT RISK & CONTROL

WHAT IS THE OPPORTUNITY?
"The Lead IT Risk Controls Analyst is a subject-area specialist with specialized training, methods and analytic techniques to create recommendations and directions for cyber risk mitigation in a complex technical environment. Focus areas of security assessment by the Lead ITRC Security Analyst includes third party security and overall security program effectiveness in mitigating risk. The ITRC Analyst's goal to create actionable information for IT and business leadership, and to provide objective assessment of cyber security risks for auditors, regulators and external parties. This requires routinely authoring detailed reports and gathering metrics ensure stakeholders receive accurate and complete information. The Lead ITRC tkeeps abreast of external cyber security trends, technologies and cyber risk management approaches, and often works with other teams on cyber risk-related initiatives to provide subject-matter recommendations and guidance to achieve a posture within the bank's overall risk appetite. The Lead ITRC serves as an expert area of specialization. This role is a working lead that provides functional guidance and may coordinates or supervise the daily activities of individual contributors or working teams in areas of specialization.Provides input on resources planning, procedures,"

WHAT WILL YOU DO?

"Define analysis objectives, collect data from internal and external sources, and evaluate/analyze data to provide objective information on cyber risks for IT and business management with both summary and detailed reporting
Assess risk within subject specialty area to evaluate the design and effectiveness of security controls
Work collaboratively with all Lines of Defense, coordinate and proactively identify, manage and monitor IT Risk.
Act as Subject Matter Expert for the activities performed to manage IT Risk
Execute IT Risk Assessment (e.g. Risk Control Self Assessments) to identify and quantify the risks and their associated controls.
Execute GLBA Risk and Control Assessment
Identify and Define Key Performance Indicators (KPIs) metrics and Key Risk Indicators (KRIs) to monitor all risks and ratings to Controls to measure the performance on the control operation.
Provide insight and classify data to assess Risk assessments
Coordinate the completion of risk mitigating actions and providing status updates of all issues statuses to senior management
Investigates large or repetitive loss events impacting the division to assess for potential systemic weaknesses and to ensure appropriate corrective action is taken.
Provide insight and classify data to assess Risk assessments
Coordinate the completion of risk mitigating actions and providing status updates of all issues statuses to senior management
Investigates large or repetitive loss events impacting the division to assess for potential systemic weaknesses and to ensure appropriate corrective action is taken.
Create new and maintain process and procedural documentation for various risk analysis and risk assessment activities; Highlight industry-based methodologies, techniques or standards (FAIR, NIST, FFIEC, etc.) used as the basis for analysis efforts
Publish routine, accurate risk analysis and assessment reports as defined by organizational risk policies and procedures to applicable audiences for each subject area discipline
Participate in other security support projects and duties as needed or requested

WHAT DO YOU NEED TO SUCCEED?
Required Qualifications

Bachelor's Degree or equivalent
Minimum of 12 years experience in Information/Cyber Security field
Minimum of 7 years experience in cyber security operations, incident response, IT risk management or investigation
Minimum 3 years' experience managing or coordinating resources such as people or projects

Additional Qualifications

Certifications are a plus (e.g., CRISC, CISA, CISM,CAMS CISSP)
Experience with process documentation, risk and control assessments, and designing/executing IT General Controls (ITGC), test scripts
Experience and/or knowledge in working with multiple IT risk and controls domains such as identity and access management, privilege success, vulnerability management privacy, incident response etc.
Understand of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations
Demonstrated experience analyzing complex cyber security data sets within subject area specialty
Demonstrated knowledge of cyber security landscape threats, trends, technologies
Demonstrated knowledge of financial regulation and control frameworks applicable to cyber security or IT risk
Excellent communication and interpersonal skills. Including a strong ability to create positive and professional business relationships with internal clients.
Strong commitment to working as a team and providing excellent customer service.
Exposure to banking or equivalent highly controlled technology environment is preferred
Masters' degree in business, computer science or related field preferred
Security certifications (CISSP, GSEC, etc.) are highly desired.
Demonstrated experience with Industry or subject specific analysis or assessment frameworks is highly desired (FAIR, NIST CSF, etc.)
Experience in banking/financial industry is strongly preferred
Formalized training in cyber security analysis or assessment techniques

WHAT'S IN IT FOR YOU?
Compensation Starting base salary: $111,408 - $189,738 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.

Benefits and Perks
At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues including:

Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start date
Generous 401(k) company matching contribution
Career Development through Tuition Reimbursement and other internal upskilling and training resources
Valued Time Away benefits including vacation, sick and volunteer time
Specialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programs
Career Mobility support from a dedicated recruitment team
Colleague Resource Groups to support networking and community engagement

Get a more detailed look at our Benefits and Perks .

ABOUT US
Since day one we've always gone further than the competition to help our clients, colleagues and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America's leading diversified financial services companies. To learn more about City National and our dynamic company culture, visit us at About Us .

INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT
City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status or other basis protected by law.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Represents basic qualifications for the position. To be considered for this position, you must at least meet the required qualifications. accepts applications on an ongoing basis, until filled.

Related Jobs

Shotcrete Nozzleman

GeoStabilization International • Permanent • North Carolina, United States • $24 - $26 / day • 12h ago

This is the one you've been looking for. A chance to put your time and energy into a company that has: Designed training and development plans to grow your money-making ability. A path to becoming a lead-hand, a Superint...

12h ago

Apply

Casing Driller

GeoStabilization International • Permanent • North Carolina, United States • $24 - $26 / day • 12h ago

Overview This is the one you've been looking for. A chance to put your time and energy into a company that has: Designed training and development plans to grow your money-making ability. A path to becoming a lead-hand, a...

12h ago

Apply

Up to $21.50/hour Procurement Specialist Hiring ASAP!

Greene Resources • Permanent • North Carolina, United States • 17h ago

Position: Procurement Specialist Location: Durham, NC Pay: $20 to $21.50/hour Experience: 5 years of closely related procurement experience. Prior experience using procurement and accounting software (SAP required). Educ...

17h ago

Apply

Senior Silicon Validation & Prototyping Engineer

Experis • Contract • North Carolina, United States • 18h ago

Engineer

Our client, a leader in advanced silicon engineering, is seeking a Senior Silicon Validation & Prototyping Engineer to join their team. As a Senior Silicon Validation & Prototyping Engineer, you will be part of t...

18h ago

Apply

Telecommunication Technician - Entry Level

DISH • Permanent • North Carolina, United States • 1d ago

Company Summary EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and prod...

1d ago

Apply