Information Risk Policies and Standards
Responsibilities:
- Review, test, and evaluate standards and controls. Suggest improvements and report on standards and controls conformance
- Refer areas of non-conformance to accountable individuals for appropriate and timely remediation to ensure an effective overall system of controls
- Interface with internal team members and key stakeholders to provide visibility into identified gaps
- Collaborates with other control areas including Corporate Audit, Financial Risk Reporting, and Enterprise Risk Management
- Participate in coordinating the annual recertification of information risk policies, standards, and controls. Controls will be developed by the teams most responsible for the work in collaboration with other subject matter experts
- Evaluate existing information risk controls and consult with technology or process owner in developing of new controls, as needed
- Communicate and champion the program roles and initiatives
Basic Qualifications:
- Possess excellent oral and written communication skills, including ability to build and deliver effective presentations, requested artifacts, and educational materials
- Manage multiple tasks and perform work with a reasonable level of supervision
- Demonstrated analytical and diagnostic skills required
- Prior experience in developing and overseeing strategic initiatives
- Excellent interpersonal skills to develop productive, positive working relationships with stakeholders to achieve goals
- Intermediate MS office and business software skills
- Ability to work east coast hours
Preferred Qualifications:
- Experience with cyber security risk standards and controls
- Knowledge with IT frameworks, preferably NIST
- Experience with GRC workflow systems
- Bachelor's degree in Computer Science, Business Administration or 5-7 years of equivalent experience in information security governance concepts
MassMutual is an Equal Employment Opportunity employer Minority/Female/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply. Note: Veterans are welcome to apply, regardless of their discharge status.
]]>