Enterprise IT Risk Manager - Security, Compliance & Resilience

Northwest Bank; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Job summary

Northwest Bank in Pittsburgh is seeking an Information Technology Enterprise Risk Manager to support the execution of the bank's risk framework related to IT, information security and data risks. You will adapt best practices to identify, assess, monitor and report technology risks to inform strategic and operational decisions.

The role involves leading RCSA activities, validating controls, partnering with IT/IS/Data teams, and driving remediation.

Qualifications

• 8–12 years cybersecurity/IT experience.
• 6–8 years prior financial institution experience.
• Bachelor's degree in MIS, Cybersecurity, or Business Administration.
• Deep understanding of IT, information security and data principles.
• Proficient in risk management methodologies and RCSA.
• Knowledge of regulatory regulations and standards (e.g., NIST CSF, GLBA, PCI DSS, HIPAA).
• Experience with vulnerability scanning and penetration testing tools.
• Strong analytical and problem-solving skills.
• Excellent communication and reporting abilities.

Responsibilities

• Oversee Risk and Control Self-Assessment (RCSA) activities within technology processes and challenge conclusions.
• Independently assess risks and drive remediation to address root causes of residual risk.
• Validate first line's IT, IS and data controls to verify design and effectiveness.
• Partner with IT/IS/Data teams to mature risk assessments and document controls.
• Support GLBA, Authentication and Access Assessments, PCI DSS and HIPAA compliance.
• Consult with first line on issues and monitor remediation progress.
• Develop metrics to quantify technology risks and review action plans.
• Oversee IT/IS/Data change management, resiliency testing, and incident response.
• Ensure compliance with Northwest's governance requirements.
• Analyze IT-related losses and derive lessons learned.

Skills

IT risk mgmt

RCSA

Regulatory know-how

Vulnerability testing

Analytical skills

Communication skills

Security regulations

Education

Bachelor's degree in MIS, Cybersecurity or Business Admin

Job description

Northwest Bank in Pittsburgh is seeking an Information Technology Enterprise Risk Manager to support the execution of the bank's risk framework related to IT, information security and data risks. You will adapt best practices to identify, assess, monitor and report technology risks to inform strategic and operational decisions.

The role involves leading RCSA activities, validating controls, partnering with IT/IS/Data teams, and driving remediation.