Technology Risk Manager (Information Security Control Division)
Core
Provide advisory and practical guidance on technology risk and information security assessments, including application and system security, third-party vendor risk, and general IT controls.
Role type
Technology Risk Manager (Information Security)
Builds
Security policies, guidelines, procedures, and risk mitigation initiatives for application, system, and third-party security.
Domain
Financial Services / Information Security
Required skills
Application security assessment, System security assessment, Third-party vendor risk management, Information security policy formulation, IT risk evaluation, Security incident remediation, Security configuration review
Preferred skills
DevSecOps, OWASP, Security testing tools (Fortify, AppScan), Fintech trends (AI, Big Data, Cloud), Physical security assessment, System architecture design
Technologies
Fortify, AppScan, Open Source Scanning tools
Responsibilities
Review IT initiatives from technology risk perspectives, Conduct regular assessments on application and OS platform security, Drive security assessments of third-party vendors, Assist in formulating and managing information security policies, Cooperate with system administrators to deploy security controls, Act as subject matter expert to identify and mitigate security risks
Seniority
Mid-level (2 years experience) to Senior (Assistant Manager)
