Webster Technology Risk Strategic InitiativesContribute to and may take a project leadership role for key initiatives supporting first line risk programsInformation Risk and Control FrameworkAssist in the design, implementation, and execution of the Risk Management framework processes within Webster Technology.In collaboration with IT process owners, lead the day-to-day activities supporting identification of material risks associated with Webster Technology activitiesConsult and guide technology and process owners with the establishment of necessary operating procedures and technical standards to mitigate these risks and comply with policies and standards.Assist in assessing control design, self-assessment processes (RCSA), control testing, and identifying KPIs and KRIs. Support the maintenance of the overall Webster Technology process taxonomy.Participate in the integration with the selected CIO Group GRC platform as needed.Take a leading role in increasin risk awareness throughout the organization.Information Risk Aggregation and ReportingContribute to the implementation and execution of integrated and automated Webster Technology risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required. Contribute to the development of reports through appropriate committeesRegulatory (Including Sarbanes Oxley (SOX))In collaboration with the second line, monitor for new regulatory guidance associated with Webster Technology activities.In collaboration with the second line, monitor for new activities, processes or technologies and assess potential risk impactSupport regulatory exams in Webster Technology. Ensure process owners maintain appropriate documentation such that Webster Technology is always exam ready.Collaborate with enterprise risk management and legal to document management responses to regulatory exam findings.Design and execute control testing programs to support compliance efforts as assignedGeneral RequirementsAble to develop the ability to plainly describe risk concepts to first line operational personnel.Synthesize complex and potentially conflicting data into simple, actionable reporting.Develop familiarity with technology, to support learning emerging technologies and how regulatory requirements may evolve.Strong written and verbal communication skills -- ability to collaborate and communicate up/down and across the organization with internal/external partners.Ability to resolve conflicting opinions without compromising high quality risk management.Bachelor s degree.10+ years of experience in Risk, Audit or Security functions, preferably in technology and in a banking environment.CISA, or other auditing or risk management certification is desired. Ability and desire to obtain relevant certification(s) strongly preferred.#J-18808-Ljbffrby Jobble

<div style="clear:both;"> Webster Technology Risk Strategic Initiatives Contribute to and may take a project leadership role for key initiatives supporting first line risk programs Information Risk and Control Framework Assist in the design, implementation, and execution of the Risk Management framework processes within Webster Technology. In collaboration with IT process owners, lead the day-to-day activities supporting identification of material risks associated with Webster Technology activities Consult and guide technology and process owners with the establishment of necessary operating procedures and technical standards to mitigate these risks and comply with policies and standards. Assist in assessing control design, self-assessment processes (RCSA), control testing, and identifying KPIs and KRIs. Support the maintenance of the overall Webster Technology process taxonomy. Participate in the integration with the selected CIO Group GRC platform as needed. Take a leading role in increasin risk awareness throughout the organization. Information Risk Aggregation and Reporting Contribute to the implementation and execution of integrated and automated Webster Technology risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required. Contribute to the development of reports through appropriate committees Regulatory (Including Sarbanes Oxley (SOX)) In collaboration with the second line, monitor for new regulatory guidance associated with Webster Technology activities. In collaboration with the second line, monitor for new activities, processes or technologies and assess potential risk impact Support regulatory exams in Webster Technology. Ensure process owners maintain appropriate documentation such that Webster Technology is always exam ready. Collaborate with enterprise risk management and legal to document management responses to regulatory exam findings. Design and execute control testing programs to support compliance efforts as assigned General Requirements Able to develop the ability to plainly describe risk concepts to first line operational personnel. Synthesize complex and potentially conflicting data into simple, actionable reporting. Develop familiarity with technology, to support learning emerging technologies and how regulatory requirements may evolve. Strong written and verbal communication skills -- ability to collaborate and communicate up/down and across the organization with internal/external partners. Ability to resolve conflicting opinions without compromising high quality risk management. Bachelor s degree. 10+ years of experience in Risk, Audit or Security functions, preferably in technology and in a banking environment. CISA, or other auditing or risk management certification is desired. Ability and desire to obtain relevant certification(s) strongly preferred. </div>

Role Description Summary: Cybersecurity Risk Analyst supporting Merger and Acquisition integrations and Divestments develops and maintains the cybersecurity Merger, Acquisition, and Divestment strategy, policies, and risk management processes to ensure that the organization effectively secures Chevron s operations. Role Description: The Cybersecurity Risk Analyst is responsible for assessing risks, analyzing cyber threats, and assisting in preventing cyber-attacks being introduced through integration of IT or OT systems. They provide guidance measures to manage risk, identify/mitigate threats, and protect against unauthorized disclosure of confidential information. Duties also include tracking of identified remediation activities across multiple teams, escalation of risks or barriers to securing an IT or OT environment and assessing the adequacy of security guardrails. Ideal candidates will assist in ensuring effective execution of cybersecurity strategies and our risk management framework by managing relationships with key stakeholders, verifying that IT risks are appropriately mitigated, as well as providing periodic updates on the state of compliance. Responsibilities: Tracks portfolio of cybersecurity integrations and divestments. Identifies areas of concern or decision points for leadership awareness and support. Monitors, tracks, and reports mitigation and resolution of IT risks to Integration and Divestment Cyber Workstream Manager. Develops cybersecurity decision support packages to provide clearly stated risks and recommendations for leadership support to progress or pause integration or divestiture activity. Facilitates cyber risk assessment exercises, perform security compliance and risk validation, and other cyber assurance exercises as required. Coordinates external and internal assurance or advisory audits, representing information technology throughout the lifecycle of the audit (from planning through remediation strategy). Works across IT, Cybersecurity, and business units to develop fully aligned integration plans (program mgmt.) Develops and updates cybersecurity integration and divestment playbook based on established best practices on risk reduction and mitigation strategies. Align and incorporate additional risk analyst and risk managers required to support integration and/or divestment activities. Updates and Incorporates cybersecurity documentation to include Incident Response, Business Continuity and Disaster Recovery Plans to meet Chevron requirements. Facilitates identification of vulnerabilities in all equipment utilized in the IT, Process Control Network (PCN)/Operational Technology (OT) and Demilitarized Zone (DMZ), including timely remediation of critical vulnerabilities. Aligns Chevron cybersecurity standards into IT and OT environments being integrated. Addresses cybersecurity gaps in pre-integrated IT and OT environments through prioritization and tracking of remediation activities. Incorporates lessons-learned and best practices into integration playbooks. Serves as cyber integration representative for internal and external cyber initiatives. Works closely with other technical, incident management, and forensic personnel to develop a broader understanding of the intent, objectives, and activities of cyber threat actors and supports the cyber defense program. Required Qualifications/Skills: Minimum 3-5 years related work experience in Information Technology field. Knowledge of and experience with Industry Policies, Standards and Controls (e.g., NIST 800-53, IEC-62443 in an ICS environment, ISO 27001, COBIT, ITIL, SOX, PCI-DSS, SANS, etc.). Understanding of key technology/data concepts such as access control, confidential data, encryption, data privacy, information management, intellectual property, business continuity, disaster recovery, security scans, and 3rd party/vendor applications. Strong knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns). Certifications: Desired but not required - Certifications in Industrial Control Systems Cybersecurity, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager, (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or other Cybersecurity Certifications (e.g. GISCP, GCIP, or similar certifications). Preferred Qualifications/Skills: A self-starter that demonstrates "One Team" behaviors and demonstrated knowledge of effective influencing tactics and strategies. Highly organized with ability to prioritize and multi-task, as well as able to thrive in a fast-paced environment. Ability to impact decisions, influence and motivate teams, and work with a variety of disciplines, cultures, and environments. Communicates in a clear, concise, understandable manner both orally and in writing. Ability to explain detailed IT concepts and solutions in business terms and make complex materials clear and engaging. Utilizes qualitative and quantitative risk analysis best practices to provide a clear decision-making framework for managing information risk. Education: Associate or Bachelor s degree in Computer Science, Cybersecurity, Information Technology, or a similar technical degree. Relevant experience will be considered Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.

Duration 4-6 months and can be extended Role Palo Alto Firewall Admin Job Duties s a senior team member in the Information Technology Risk department within Webster Technology, the incumbent will support the design, implementation, and lead elements of execution of risk functions for Webster Technology. These functions include Sarbanes Oxley (SOX) Processes, Assessments, risk item resolution or acceptance tracking, and risk awareness and training. Specific duties are varied and may include any of the following: Webster Technology Risk Strategic Initiatives <ul> <li> Contribute to and may take a project leadership role for key initiatives supporting first line risk programs </li> </ul> Information Risk and Control Framework ssist in the design, implementation, and execution of the Risk Management framework processes within Webster Technology. In collaboration with IT process owners, lead the day-to-day activities supporting identification of material risks associated with Webster Technology activities Consult and guide technology and process owners with the establishment of necessary operating procedures and technical standards to mitigate these risks and comply with policies and standards. ssist in assessing control design, self-assessment processes (RCSA), control testing, and identifying KPIs and KRIs. Support the maintenance of the overall Webster Technology process taxonomy. Participate in the integration with the selected CIO Group GRC platform as needed. Take a leading role in increasin risk awareness throughout the organization. Information Risk Aggregation and Reporting <ul> <li> Contribute to the implementation and execution of integrated and automated Webster Technology risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required. Contribute to the development of reports through appropriate committees </li> </ul> Regulatory (Including Sarbanes Oxley (SOX)) <ul> <li> In collaboration with the second line, monitor for new regulatory guidance associated with Webster Technology activities. </li> <li> In collaboration with the second line, monitor for new activities, processes or technologies and assess potential risk impact </li> <li> Support regulatory exams in Webster Technology. Ensure process owners maintain appropriate documentation such that Webster Technology is always exam ready. </li> <li> Collaborate with enterprise risk management and legal to document management responses to regulatory exam findings. </li> <li> Design and execute control testing programs to support compliance efforts as assigned </li> </ul> General Requirements <ul> <li> ble to develop the ability to plainly describe risk concepts to first line operational personnel. </li> <li> Synthesize complex and potentially conflicting data into simple, actionable reporting. </li> <li> Develop familiarity with technology, to support learning emerging technologies and how regulatory requirements may evolve. </li> <li> Strong written and verbal communication skillsability to collaborate and communicate up/down and across the organization with internal/external partners. </li> <li> bility to resolve conflicting opinions without compromising high quality risk management. </li> <li> Bachelors degree. </li> <li> 10+ years of experience in Risk, Audit or Security functions, preferably in technology and in a banking environment. </li> <li> CISA, or other auditing or risk management certification is desired. Ability and desire to obtain relevant certification(s) strongly preferred. </li> </ul> Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.

Risk Analyst Diverse Lynx Jobs

It Risk Analyst And Control Tester
April 28, 2024

It Risk Analyst And Control Tester
April 18, 2024

Cybersecurity Risk Analyst
April 16, 2024

It Risk Analyst With 10 Exp
April 15, 2024

Cybersecurity Risk Analyst
April 13, 2024

Senior Treasury Risk Analyst
April 12, 2024

It Risk Analyst With 10 Exp
April 11, 2024

It Risk Analyst And Control Tester
April 11, 2024

Quick filters

Top companies

Risk Analyst Diverse Lynx Jobs

It Risk Analyst And Control TesterApril 28, 2024

It Risk Analyst And Control TesterApril 18, 2024

Cybersecurity Risk AnalystApril 16, 2024

It Risk Analyst With 10 ExpApril 15, 2024

Cybersecurity Risk AnalystApril 13, 2024

Senior Treasury Risk AnalystApril 12, 2024

It Risk Analyst With 10 ExpApril 11, 2024

It Risk Analyst And Control TesterApril 11, 2024