Remote Lead Security Risk Assessor

Lincoln Financial; Radnor (Delaware County); On-site; USD 120,000 - 193,000; Full time

Benefits offered by this job

PTO/ parental leave

Competitive 401K

Tuition assistance program

Employee assistance program

Health coaching

Financial counseling

Job summary

Lincoln Financial seeks a Senior Information Security Analyst to develop and conduct risk assessments on external parties to ensure information security controls meet Lincoln’s risk management standards. You will define risk profiles, recommend mitigations, communicate with stakeholders, and stay current on AI-related security trends to support responsible adoption across the organization.

You will collaborate with internal teams to ensure regulatory compliance, document findings, and

Qualifications

• 4 year/bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent – OR - Work experience (Minimum 4 years of experience in lieu of Bachelor's)
• 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position.
• 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position.
• CompTIA Security+ certification or greater preferred.

Responsibilities

• Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln’s information security risk management requirements for the services to be provided.
• Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
• Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
• Effectively escalates and challenges risks, exceptions, and concerns using a fact-based, solution-oriented approach while maintaining productive working relationships.
• Assists in creating and enforcing information security standards, policies and procedures.
• Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
• Communicates complex security and risk concepts in a professional, constructive, and audience-appropriate manner, adapting messaging to various levels of technical expertise, organizational role, and business need.
• Builds credibility, trust, and productive working relationships through effective stakeholder engagement, active listening, respectful professional communication, and demonstrated openness to differing perspectives.
• Demonstrates sound judgment and organizational awareness when communicating concerns, advocating positions, and navigating disagreement, ensuring productive outcomes and positive stakeholder experiences.
• Responds to incoming requests from external parties for information concerning Lincoln’s information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner.
• Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate.
• Develops, analyzes, and leverages metrics, trends, and key performance indicators (KPIs) to measure program effectiveness, identify opportunities for continuous improvement, and influence leadership decision-making.
• Records pertinent documentation and communications for all assessments in Lincoln’s online information technology (IT) governance, risk, and compliance platform.
• Evaluates and identifies security risks of third-party artificial intelligence (AI) solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices.
• Applies working knowledge of AI technologies, including generative AI, to evaluate third-party risk, identify emerging security considerations, and support responsible adoption within the organization.
• Maintains knowledge of emerging AI trends, technologies, and associated security risks to support innovation and responsible adoption within the organization.

Skills

Risk assessment

Information security

AI risk

Stakeholder engagement

Regulatory knowledge

Education

Bachelor's degree in Information Systems

Equivalent experience

Job description

Lincoln Financial seeks a Senior Information Security Analyst to develop and conduct risk assessments on external parties to ensure information security controls meet Lincoln’s risk management standards. You will define risk profiles, recommend mitigations, communicate with stakeholders, and stay current on AI-related security trends to support responsible adoption across the organization.

You will collaborate with internal teams to ensure regulatory compliance, document findings, and