IT Enterprise Risk Manager: Security & Data Risk Leader

Northwest Bank; North Carolina; On-site; USD 120,000 - 180,000; Full time

Job summary

Northwest Bank is seeking an Information Technology Enterprise Risk Manager to support the risk management framework related to technology, information security, and data risks. The role involves RCSA oversight, control testing, and collaboration with IT, IS, and Data teams to mature risk assessments.

Responsibilities include conducting issues management, governance, and program validation across GLBA, PCI DSS, and HIPAA compliance, while leading credible challenge and reporting to ensure timely

Qualifications

• Bachelor's Degree in MIS, Cybersecurity, or Business Administration.
• 8–12 years cybersecurity/IT experience.
• 6–8 years experience in financial institutions.
• Deep understanding of IT, information security, and data principles.
• Proficient in risk management methodologies and RCSA.
• Knowledge of compliance standards: NIST CSF, GLBA, PCI DSS, HIPAA.
• Experience with vulnerability scanning and penetration testing tools.

Responsibilities

• Provide oversight of RCSA activities within technology processes and challenge conclusions.
• Assess risks and drive remediation to reduce residual operational risk.
• Validate first line IT/IS/Data controls and test for design and operation effectiveness.
• Support maturation of IT risk assessments and document controls/gaps.
• Assist with GLBA, Authentication, PCI DSS, and HIPAA assessments.

Skills

RCSA oversight

IT risk management

NIST CSF

GLBA compliance

PCI DSS

HIPAA compliance

Vulnerability scanning

Penetration testing

Risk assessment

Analytical skills

Communication skills

Education

Bachelor's Degree in MIS/Cybersecurity/Business Admin

Tools

Vulnerability scanning tools

Penetration testing tools

Job description

Northwest Bank is seeking an Information Technology Enterprise Risk Manager to support the risk management framework related to technology, information security, and data risks. The role involves RCSA oversight, control testing, and collaboration with IT, IS, and Data teams to mature risk assessments.

Responsibilities include conducting issues management, governance, and program validation across GLBA, PCI DSS, and HIPAA compliance, while leading credible challenge and reporting to ensure timely