Tech Risk Consultant
1 Vanderbilt Ave 16th Floor, New York, NY 10017 new york, NY 10017 US
Job Description
Overview
As a Technology Risk Management Consultant, you will support the governance, audit, and management of technology risk at OHA. You will work closely with the IT risk manager and the broader Technology organization to help identify and mitigate risks, operate key technology controls, facilitate efficient audit reviews, and support the delivery of strategic initiatives. You are curious, quick to learn, resourceful, and adaptive, and you work well technical and non-technical teams.
Responsibilities
- Support the third-party risk management program by classifying third parties, collecting and reviewing information related to their information security, and tracking identified risks
- Execute key recurring technology controls and prepare audit-ready evidence of operation
- Validate the continuous operation of key processes across the Technology organization, identify and escalate observed deviations
- Assemble, organize, and deliver comprehensive evidence requested in audit reviews in a timely manner
- Contribute to the delivery of strategic priorities across technology risk governance and identity and access management by completing tasks as assigned and by collaborating with relevant stakeholders
- Assemble and produce periodic metrics in support of leadership reporting ion the state of technology risk
- Identify opportunities to automate and streamline data and evidence gathering and build solutions to put the ideas to fruition
Qualifications
- Interest in Computer Science, Information Systems, Cybersecurity, or a related field
- Experience in technology audit, governance, risk, and compliance, information security, or related field is preferred, and willingness to learn is required
- Experience working in a cloud environment – AWS preferred
- Exposure to technology domains, including network security, host and database security, cloud security, and application security
- Experience with security standards and regulatory compliance, such as ISO 27001, NIST, SOC1, Sarbanes-Oxley Act, and GDPR is preferred
- Familiarity with a range of best-of-breed security tools and applications
- Strong communication and interpersonal skills
- CISA, CRISC, CISSP and/or AWS Security certification are encouraged
Work location
The position is hybrid, currently with three in-office days and two remote days every week. The office is located near Grand Central Terminal.
The Phoenix Group Advisors is an equal opportunity employer. We are committed to creating a diverse and inclusive workplace and prohibit discrimination and harassment of any kind based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We strive to attract talented individuals from all backgrounds and provide equal employment opportunities to all employees and applicants for employment.
Meet Your Recruiter
Cara Partovich
VP of Recruiting
A graduate from Penn State where she received her degree in Communications and Business. She has been with TPG since February 2016, and got into recruiting as she has always been intrigued by it. When she is not in the office you can find her hanging in the city or traveling with her husband, baby girl and dog.