Integrity
We must conduct our business fairly, with honesty and transparency. Everything we do must stand the test of public scrutiny.
Read more about this company
Assisting in finding practical and cost-effective solutions to identified or revealed security and risk issues
Building and maintaining strong and positive working relationships and effective means of communication with other risk associates, including the Enterprise Risk Management, Operational Risk Management, and so on
Providing direction and guidance in the development, implementation, and communication of risk-related policies and standards
Undertaking risk reviews of the IT control framework
Completing implementation activities ranging from various technical programs
Build and maintain an external network with other senior IT risk professionals, as well as applicable risk forums/bodies
Working in relation and conformity with internal and external auditors
Evaluating alternative means of reducing the firm’s exposure to catastrophic loss
Providing technical guidance to employees, colleagues, and/or customers
Providing aggregated risk supervision for various high impact areas of IT services for core components of IT risk measurement and reporting activities
Actively engaging in end-to-end risk remediation planning, resolution, and monitoring activities.
Requirements
Must have one of the following certifications:
Certified in Risk and Information System Control (CRISC)
Certified in the Governance of Enterprise IT (CGEIT)
Certified Information Systems Auditor (CISA)
Certified Information Systems Security Professional (CISSP).