Senior IT Risk & Compliance Consultant

Sammons Financial Group Companies; Sioux Falls (SD); On-site; USD 84,721 - 176,501; Full time

Benefits offered by this job

Health coverage for you and family

Performance-based incentive program

ESOP and 401(k)

Friday afternoons off

Tuition reimbursement

Volunteer time off and matching gifts

Job summary

Sammons Financial Group Companies is seeking an IT Risk & Compliance leader to identify, manage, and monitor IT risk across the organization. The role includes developing risk methodologies, conducting assessments, mentoring analysts, and ensuring regulatory compliance within IT.

The position emphasizes collaboration with IT and business partners to strengthen risk posture. The role requires a minimum of 10 years in risk management/ IT security, strong knowledge across risk domains, and

Qualifications

• Bachelor's Degree in Business, Computer Science, IT, Risk Management or related field preferred.
• Minimum 10 years' experience in risk management, information security and/or internal controls including experience as an IT Auditor, IT Security Analyst or IT Risk Analyst preferred.
• Broad knowledge of Information Risk Management concepts and how these concepts apply to the business.
• Strong knowledge of IT, information security and information risk management domain areas such as Information Systems Security, SDLC, Testing Methodologies, Backup and Recovery, Risk Management, Data Retention and Recovery, Business Continuity, Disaster Recovery, Leadership and Communication, Security Awareness.
• Specific knowledge of risk management principles and models.
• Knowledge of Life Insurance and Annuity products, insurance processes and methodologies.

Responsibilities

• Provide IT Risk and Compliance support to the Company while serving as SME for the IT Risk and Compliance team.
• Develop and implement IT risk management methodologies.
• Develop and implement IT risk assessment processes.
• Conduct regular Company information security risk assessments, consulting with other IT Risk and Compliance team members.
• Mentor IT Risk and Compliance analysts.
• Train IT staff in conducting targeted information security risk assessments.
• Develop and implement IT risk and security policies.
• Monitor information risks, mitigation and remediation efforts; report and present risk to IT Management.
• Understand and accountable for ensuring compliance with IT risk and security regulatory requirements.
• Work with IT and entire SFG staff to ensure their compliance with IT and risk security policies.
• Provide expertise to other IT Risk and Compliance team members with validation of test results and problem analysis and resolution.
• Develop and implement IT controls framework.
• Work with IT to assist in the selection of appropriate control activities; measure and monitor those control activities.
• Provide IT risk consulting to SFG IT staff.
• Consult on other IT Risk and Compliance team activities.
• Continuously monitor the risk function, identifying, developing and implementing process improvements using discretion and trusted judgment.
• Commitment to embrace Sammons Financial Group Companies shared values (Accountability, Connection, Openness, Respect and Integrity).
• As stated within the Company Attendance and Punctuality policy, regular attendance is required and expected in order to meet the business service levels and workflow demands.
• Participate in other initiatives and/or projects as necessary.

Skills

Risk management

IT risk

Information security

Internal controls

Auditing

Education

Bachelor's degree in Business/CS/IT/Risk mgmt

Job description

Sammons Financial Group Companies is seeking an IT Risk & Compliance leader to identify, manage, and monitor IT risk across the organization. The role includes developing risk methodologies, conducting assessments, mentoring analysts, and ensuring regulatory compliance within IT.

The position emphasizes collaboration with IT and business partners to strengthen risk posture. The role requires a minimum of 10 years in risk management/ IT security, strong knowledge across risk domains, and