Requirements

Bachelor’s degree, or higher
Knowledge of, and interest in, technology, information security and/or cybersecurity, risk management, and the financial services sector
Organizational skills with a demonstrated ability to manage multiple requests at the same time
Creative thinking and problem-solving abilities, coupled with a risk management mindset
Effective communication with technical and non-technical audiences, both verbally and in writing
Excellent interpersonal skills at all levels and the ability to develop and maintain good relationships
Ability to prioritize requests and adapt to changing needs in a dynamic work environment
Outstanding stakeholder management

Nice to Haves

2-4 years of prior experience in a risk, compliance, regulatory, or information technology/security adjacent role
Experience in conducting risk assessments and risk assessment of processes and applications
Industry Certifications such as Security+, CISA, CISSP, and CISM are a plus

Assisting in high profile, global projects that strengthen the firm’s cybersecurity and technology risk posture
Identifying areas for improvement in our control / policy framework and drive uplift
Developing methodology to identify critical assets and sets of applicable controls based on risk
Analyzing completeness of control design (e.g. room for auto-measurement, KPIs, adoption across applicable assets, implementation blockers, etc.)
Analyzing industry frameworks (such as NIST), new external regulations, and internal policies/standards to enhance processes, controls, and governance
Designing and driving control assessment governance (completeness, performance, adequacy, etc.)

Commitment to fostering and advancing diversity and inclusion
Training and development opportunities
Firmwide networks
Wellness and personal finance offerings
Mindfulness programs
Opportunities for professional and personal growth
Reasonable accommodations for candidates with special needs or disabilities during the recruiting process