Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you're looking for. Position Summary Designs and executes critical aspects of the Enterprise Security Risk Management function. Develops, recommends and implements controls and cost-effective approaches to minimize the organization's risks effects. Partners with the business and technology teams to promote understanding of the business landscape in order to facilitate security risk-based discussions. Collaborates with executive and technical leadership to embed a security-focused mindset in all areas. Essential Responsibilities <ul><li>Analyzes organizational security risks, interactions, develop and publish security risk handbook, and procedures for implementation ensuring alignment with appropriate standards and frameworks.</li><li>Manage and execute risk identification, assessment and quantification, aggregation reporting, and monitoring processes. Interprets internal or external business issues and recommends solutions/best practices. Solves complex problems; takes a broad perspective to identify solutions.</li><li>Analyzes external market dynamics and other data sources to assess trends and develop actionable insights and recommendations to management, via understanding of the business model and the information available for analysis. Assist in coordinating the security risk within the context of the security risk model.</li><li>Assesses and communicates information regarding business risks with functions across the organization. Builds and maintains relationships with business partners, including understanding their specific risk landscape. Uses professional knowledge, skills, and experience to influence and guide, monitor, and credibly challenge business areas as they manage risk and make risk decisions.</li><li>Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk assessments, and regulatory reporting standards and expectations.</li><li>Develops presentations appropriate for senior level audiences and external regulators. May mentor and give work direction to less experienced colleagues.</li></ul> Minimum Requirements <ul><li>Bachelor's degree or higher in an IT or risk management related field.</li><li>Minimum of 8 years of experience working in security (physical or cyber).</li><li>3 years of experience with risk assessments, audit or control testing.</li><li>Experience and expertise in security and lifecycle management, auditing methodology, and technology risk assessments.</li><li>Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals and initiatives.</li><li>Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.</li><li>Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.</li><li>Solid understanding of information security policies, standards, industry best practices, and frameworks. (ISO 27K, NIST 800-53, FISMA, BITS etc.).</li><li>Strong business acumen with the proven ability to bridge the gap between business and technology.</li></ul> As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you're ready to be a part of something big, we invite you to join our team. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Individuals with a disability who need an accommodation to apply please contact us at recruiting@xcelenergy.com. Non-Bargaining The anticipated starting base pay for this position is: $92,300.00 to $130,567.00 per year This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part. Deadline to Apply: 04/24/24 EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF) ACCESSIBILITY STATEMENT Xcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at recruiting@xcelenergy.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Datasite is where deals are made. We provide the data rooms and SaaS technology used in M&A and other high-value transactions, to deliver projects in more than 170 countries. Carrying that success into the future is all about you. Your useful skills, your unusual experience, your unique ideas. Everyone here brings something unexpected. What's yours? Invest your talents in us, and we'll return the compliment. Job Description: The responsibilities for the Sr. Risk Analyst - will be to act as the subject matter expert on implementation, improvement, and daily management of the Sr. Risk Management Program. The individual will also assist and support development and maintenance of Security Client Engagement, Security Vendor Management and Security Audits to ensure that policies, standards, procedures, and audit activities are in alignment with business regulatory requirements. Success in the role will be measured by the effectiveness of the security risk management program and the cultural and behavioral integration of the security vendor, security client engagement and security vendor program by employees, suppliers, vendors and contractors. Essential Duties and Responsibilities: <ul><li>Oversee Datasite management and staff regarding risks and controls pertaining to security-related concepts and compliance and audit requirements.<ul><li>Act as point person and subject matter expert on Information Security Risk Management principles, practices, rules, and procedures.</li><li>Collaborate with internal teams to gather relevant documentation and information needed for tracking risks.</li><li>Develop and maintain a centralized repository for risk-related, responses and documentation, ensuring easy retrieval and access for tracking and measuring in accordance with the organizations definitions.</li><li>Improve and maintain key performance indicators (KPIs) to measure the efficiency and effectiveness of the risk management response process,</li><li>Communicate proactively internally and with clients, addressing inquiries and providing updates on risk statuses.</li><li>Provide guidance to IT group members and organization personnel on related policies, procedures, regulatory rules, and compliance.</li></ul></li><li>Develop working relationships with business unit staff and management at different organizational levels and locations, data owners, vendors, and clients; use business relationships to maintain awareness of corporate projects that may impact security compliance and facilitate continual awareness of security compliance to business partners.</li><li>Support and assist internal and external security compliance monitoring activities, including vendor audits, client audits, due diligence reviews, internal audits:<ul><li>Evaluate and respond to security related questionnaires.</li><li>Work with auditors to facilitate on and offsite fieldwork.</li><li>Plan & facilitate documentation gathering.</li><li>Report audit findings to appropriate parties.</li><li>Document and respond to any audit findings and recommendations.</li></ul></li><li>Support and assist Datasite service provider risk assessment processes and audits:<ul><li>Work with business lines to plan and facilitate vendor risk assessments.</li><li>Evaluate risk assessment responses.</li><li>Support on-site service provider audits (as necessary)</li><li>Document and report on findings (in accordance with escalation procedures) </li></ul></li><li>Proactively produce relevant reports for the Security team and business management</li><li>Miscellaneous duties as assigned.</li></ul> Additional Requirements: <ul><li>Knowledge of security compliance requirements; experience interpreting requirements and communicating their impact to the company</li><li>Excellent communication skills to clearly and concisely communicate security compliance requirements to all levels of Datasite (from staff to SVP); to communicate unusual or problem situations to Security, Legal, and the Business</li><li>Ability to organize work activities and respond to priority changes; ability to lead multiple projects concurrently.</li><li>Works under limited supervision; may supervise/mentor less experienced compliance analysts on a project-by-project or informal basis.</li></ul> Education: <ul><li>Bachelor's degree or equivalent experience</li><li>Professional certification(s) an asset (CISA, CISSP, etc.) a plus</li></ul> Minimum Experience: <ul><li>3-5+ years working with requirements relating to risk, privacy, data security and governance frameworks including ISO27001,</li><li>27017,27018, 27701 and SOC 2 Type II, GDPR in a complex organizational environment.</li><li>Experience with implementing and managing risk management frameworks.</li><li>Experience interacting with external auditors and an understanding of internal audit standards, IT general controls, and process control design and testing methods in a complex organizational environment.</li><li>Experience with communicating information security responses directly and indirectly with clients and customers.</li><li>Experience building and maintaining relationships and keeping informed regarding relevant changes throughout the organization.</li></ul> Physical Demands: <ul><li>Requires motor skills to operate a keyboard and telephone.</li><li>Regularly required to sit.</li><li>Requires ability to communicate over the phone and in person.</li><li>Requires close vision.</li></ul> As a global organization, Datasite knows that diverse perspectives are essential to our success. We're committed to maintaining a diverse workforce to serve our customers around the world. Datasite is an equal opportunity employer (EEO) and furthers the principles of EEO through Affirmative Action.

MUST BE LOCAL TO MINNEAPOLIS AND WILLING TO GO ONSITE IN A HYBRID SCHEDULE!Agility Partners is seeking a qualified Cyber Risk Manager to fill an open position with one of our banking clients. This is an exciting opportunity to report to the Infrastructure Governance Director and be responsible for supporting the Chief Information Security Officer (CISO) and Cyber Security organization, providing leadership in all matters related to audit, compliance, and remediation of risk.In this role you will:<ul><li>Manage a portfolio of Audit, Regulatory, Risk and Self-Identified Findings</li><li>Report regular status to the CISO, Senior Leadership and Management</li><li>Build strong working relationships with key partners, Risk, Cyber Security, and IT areas outside of immediate team</li><li>Perform risk-based evaluation and analysis in domains to identify issues and paths to remediation</li><li>Deliver timely escalation of all issues requiring attention to senior management.</li><li>Collaborate with audit/business segment/segment risk to address issues with plausible action plans and target dates.</li><li>Ensure business segment adheres to corporate and business unit policies and procedures.</li><li>Develop and maintain a roadmap for, including execution of strategic, tactical, and continuous improvement initiatives</li><li>Mature reporting including depth of data as well as breadth of the process footprint to drive governance, risk metrics, security analysis, process efficiency, modeling, and controls</li><li>Increase governed process visibility through dashboards and other presentations of metrics (including KPIs and CSFs) for measuring compliance with controls and standards</li><li>Manage simultaneous multiple complex tasks and to bring activities to closure within expected timelines</li><li>Champion process improvements, simplification, and automation across the enterprise</li><li>Engage with other teams to keep an up-to-date view on their objectives and activities</li><li>Remain abreast of technology developments and proactively align the future state goals with strategic business goals.</li><li>May lead initiatives, projects and perform other duties as assigned</li></ul>The Ideal Candidate<ul><li>Demonstrated leadership experience by providing coaching, skill development and feedback to team members</li><li>Excellent verbal and written communications and the ability to communicate and present requirements and issues clearly and concisely.</li><li>Strong interpersonal skills and ability to build strong partnerships and work collaboratively with all businesses.</li><li>Ability to deal with ambiguity and navigate through complex situations.</li><li>High level of professionalism</li><li>Proven negotiation skills</li><li>Working knowledge of recognized risk frameworks</li><li>10+ years of experience in IT with Cyber Security background</li><li>4+ years of experience in a lead / senior role</li></ul>Preferred Qualifications<ul><li>Advanced knowledge of risk management and audit principles and regulatory compliance requirements.</li><li>Experience in using Archer or other Risk Management systems</li><li>5+ years of experience in ITIL processes</li><li>Experience of cloud technologies</li><li>Risk certification (CISSP, CISA or CRISC)</li></ul>Reasons to Love It<ul><li>This is a great opportunity to work for a mid-sized financial institution that is striving to be the bank of choice; one that focuses on its customers, not its competition. An organization that provides a dynamic, fulfilling work environment that is productive, collaborative and innovative.</li><li>Highly visible team with a regional financial services company where your work matters and your accomplishments are recognized!</li><li>Amazing opportunity for growth, healthy work/life balance and a community focused environment</li><li>Working for an organization that focuses on company culture, inclusion and diversity</li><li>On a team whose Core values that include: Can-Do Attitude, Service at Heart and Forward Thinking</li><li>50% medical coverage for you and your entire family, short/long term disability and life insurance options</li><li>401(k) </li><li>Life Insurance </li><li>Disability coverage</li></ul>by Jobble

**MUST BE LOCAL TO MINNEAPOLIS AND WILLING TO GO ONSITE IN A HYBRID SCHEDULE!**Agility Partners is seeking a qualified Cyber Risk Manager to fill an open position with one of our banking clients. This is an exciting opportunity to report to the Infrastructure Governance Director and be responsible for supporting the Chief Information Security Officer (CISO) and Cyber Security organization, providing leadership in all matters related to audit, compliance, and remediation of risk.In this role you will:<ul><li>Manage a portfolio of Audit, Regulatory, Risk and Self-Identified Findings</li><li>Report regular status to the CISO, Senior Leadership and Management</li><li>Build strong working relationships with key partners, Risk, Cyber Security, and IT areas outside of immediate team</li><li>Perform risk-based evaluation and analysis in domains to identify issues and paths to remediation</li><li>Deliver timely escalation of all issues requiring attention to senior management.</li><li>Collaborate with audit/business segment/segment risk to address issues with plausible action plans and target dates.</li><li>Ensure business segment adheres to corporate and business unit policies and procedures.</li><li>Develop and maintain a roadmap for, including execution of strategic, tactical, and continuous improvement initiatives</li><li>Mature reporting including depth of data as well as breadth of the process footprint to drive governance, risk metrics, security analysis, process efficiency, modeling, and controls</li><li>Increase governed process visibility through dashboards and other presentations of metrics (including KPIs and CSFs) for measuring compliance with controls and standards</li><li>Manage simultaneous multiple complex tasks and to bring activities to closure within expected timelines</li><li>Champion process improvements, simplification, and automation across the enterprise</li><li>Engage with other teams to keep an up-to-date view on their objectives and activities</li><li>Remain abreast of technology developments and proactively align the future state goals with strategic business goals.</li><li>May lead initiatives, projects and perform other duties as assigned</li></ul>The Ideal Candidate<ul><li>Demonstrated leadership experience by providing coaching, skill development and feedback to team members</li><li>Excellent verbal and written communications and the ability to communicate and present requirements and issues clearly and concisely.</li><li>Strong interpersonal skills and ability to build strong partnerships and work collaboratively with all businesses.</li><li>Ability to deal with ambiguity and navigate through complex situations.</li><li>High level of professionalism</li><li>Proven negotiation skills</li><li>Working knowledge of recognized risk frameworks</li><li>10+ years of experience in IT with Cyber Security background</li><li>4+ years of experience in a lead / senior role</li></ul>Preferred Qualifications<ul><li>Advanced knowledge of risk management and audit principles and regulatory compliance requirements.</li><li>Experience in using Archer or other Risk Management systems</li><li>5+ years of experience in ITIL processes</li><li>Experience of cloud technologies</li><li>Risk certification (CISSP, CISA or CRISC)</li></ul>Reasons to Love It<ul><li>This is a great opportunity to work for a mid-sized financial institution that is striving to be the bank of choice; one that focuses on its customers, not its competition. An organization that provides a dynamic, fulfilling work environment that is productive, collaborative and innovative.</li><li>Highly visible team with a regional financial services company where your work matters and your accomplishments are recognized!</li><li>Amazing opportunity for growth, healthy work/life balance and a community focused environment</li><li>Working for an organization that focuses on company culture, inclusion and diversity</li><li>On a team whose Core values that include: Can-Do Attitude, Service at Heart and Forward Thinking</li><li>50% medical coverage for you and your entire family, short/long term disability and life insurance options</li><li>401(k) </li><li>Life Insurance </li><li>Disability coverage</li></ul>

Risk Analyst Jobs in Minneapolis, MN

Security Risk Analyst Mergers Acquisitions Risk Assessment
April 19, 2024

Principal Security Risk Analyst
April 16, 2024

Security Risk Analyst Mergers Acquisitions Risk Assessment
April 16, 2024

Principal Security Risk Analyst
April 15, 2024

Sr Risk Analyst
April 13, 2024

Senior Risk Analyst
April 11, 2024

Senior Risk Analyst
April 5, 2024

Quick filters

Top companies

Risk Analyst Jobs in Minneapolis, MN

Security Risk Analyst Mergers Acquisitions Risk AssessmentApril 19, 2024

Principal Security Risk AnalystApril 16, 2024

Security Risk Analyst Mergers Acquisitions Risk AssessmentApril 16, 2024

Principal Security Risk AnalystApril 15, 2024

Sr Risk AnalystApril 13, 2024

Senior Risk AnalystApril 11, 2024

Senior Risk AnalystApril 5, 2024