IT Risk & Security Specialist

Job description

The role is accountable for advice, awareness, planning and monitoring of all the activities related to IT & Cybersecurity Risk controls compliance.

It is a role actively motivated to engage stakeholders in the implementation of controls and ensure the IT & Cybersecurity Risk impacts have been identified and prioritized in his/her tribe’s backlog. She/he guides the Tribe team through the whole IT Risk compliance process, ensuring compliance within the change management process and ensuring the maintenance of compliance status for all IT & Cybersecurity Risk controls.

Key responsibilities

1. Engage Stakeholders and related squads
2. Engage stakeholders (Tribe Leads, Asset Owners, Product Owners and IT Area Leads) in the implementation of controls and ensure the IT Risk controls have been identified and prioritized in the tribe’s backlog. Providing enough visibility about the program and the steps the tribe must follow, including walkthrough, deliverables and estimations.
3. Single Point of Contact between his/her Tribe, Central IT Risk COE and CISO team
4. Provide feedback and being the Single Point of Contact between asset´s Product Owners and CISO. Accountable for remediating and solving impediments expressed by Product Owners related to IT & Cybersecurity Risk.
5. Accountable for IT Risk tools (ITRMP) Status of his/her Tribes
6. Definition of a Reliable and sustainable IT Risk year plan for his/her Tribe’s assets
7. Recurrently reporting to IT Risk Tribe Lead
8. Cooperating with IT Risk and Security COE and CISO team in Risk Roadmap Evaluation for the assets in scope of his/her Tribe
9. Be Focal point in the Tribe for IT & Cybersecurity Risk Topics
10. Continuously train Tribes colleagues, each time that a new colleague joins and each time a new IT Risk topic or template comes or an existing one is changed
11. Raise issues in case of not possibility of reaching one on the agreed IT & Cybersecurity Risk targets
12. Support, with IT Area Lead, the Tribe Lead in all the topics related to IT & Cybersecurity Risk
13. Be continuously aligned with IT Custodian (IT Area Lead) for understanding and receiving support on technical knowledge on the Tribe owned assets
14. Support other Bank areas during Tech audits

Requirements:

1. Degree in Information Technology/Engineering or equivalent
2. Knowledge of IT & Cybersecurity Risk processes
3. Fluent in English (written and spoken)
4. MS Office Advanced User
5. Analysis skills

Soft Skills

1. Leadership
2. Negotiation skills
3. Relational skills
4. Teamwork
5. Management skills and interaction with stakeholders
6. Problem solving
7. Customer Centricity
8. Excellence in execution