Information Risk Manager (IRO)
Core
Supporting Directors in delivering the 2nd Line of Defense risk oversight program across North America for US and Canadian Segments.
Role type
Manager, Information Risk Management (2nd Line of Defense)
Builds
2nd line oversight program covering key initiatives, high risk third parties, business continuity, disaster recovery, severe incidents, loss events, risk exceptions, issues, CAPs, and RCSAs.
Domain
Financial Services / Information Security / Technology Risk / Business Continuity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Information Security, Business Resiliency, Technology Risk, Risk and Control Self Assessments (RCSAs), Business Continuity and Disaster Recovery, Severe Incidents and Loss Events, Risk Exceptions, Issues and CAPs, High Risk Third Parties, Regulatory Compliance, Technical Concept Explanation
Preferred skills
CISSP, CISA, CISM, CRISC, CSSLP, MBCP, Timely Delivery, Time Management, Relationship Building, Influence without Authority
Technologies
IT compliance frameworks, Security tools
Responsibilities
Deliver 2nd line information risk oversight and challenge program to US and Canadian Segments, Enable L1 teams to manage information risks efficiently, Promote information risk culture and DEI values, Stay abreast of new regulations and requirements for information security and privacy, Maintain relationships with internal customers and risk partners
Seniority
Manager, hands-on IC
