Specialist, Tech Risk Management

Prudential Ins Co of America; Newark (NJ); On-site; USD 100,000 - 150,000; Full time

Job summary

Prudential Ins Co of America is seeking a Specialist in Tech Risk Management- Regulatory and Client Response to partner with GT&O, Legal and Compliance teams. You will help identify, mitigate, and respond to regulatory inquiries and client assessments, while coordinating with stakeholders to ensure timely and accurate deliverables.

Ideal candidates have 3-5 years of experience in technology risk or compliance, familiarity with TPRM, GRC tools, and strong communication skills to influence across

Qualifications

• Bachelor's degree required in a related field or equivalent experience.
• 3-5 years of experience in technology risk, compliance, or similar roles.
• Proficient knowledge of IT risk management frameworks (NIST, ISO, COBIT, SANS).
• Familiarity with SOC 1/2, SOX, HIPAA, GDPR/CCPA regulatory requirements.

Responsibilities

• Partner with GT&O and Law & Compliance to align tech risk programs with regulatory requirements.
• Perform gap analyses for tech-related laws and regulations and drive closure with process owners.
• Prepare and submit timely regulatory responses and evidence.
• Support external audits (SOC/SOX) activities, including attestations.
• Assist in client tech and security assessments and due diligence reviews.

Skills

Stakeholder management

Regulatory knowledge

Risk assessment

Communication

Attention to detail

Education

Bachelor's Degree

Tools

RSA Archer

IBM OpenPages

SAP GRC

ServiceNow GRC

Job description

Job Classification: Technology - Risk & Governance

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology & Operations (GT&O) team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

The GT&O Corporate Enterprise Services organization is seeking a Specialist, Tech Risk Management- Regulatory and Client Response, who will collaborate with GT&O's various functional areas, individual business units, and other corporate functions to identify, mitigate, and improve areas of risk that may impact our organization. Reporting to the Vice President, Tech Risk Management - Compliance Risk & Records, you will be partnering with stakeholders throughout GT&O and legal and compliance teams to ensure complete, accurate and timely responses to regulatory inquiries and client assessments. In addition, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus on all that you do.

Here is What You Can Expect on a Typical Day

• Partner closely with stakeholders across GT&O and Law and Compliance to ensure alignment of technology risk management and control programs with legal and regulatory requirements and mitigate potential risks
• Perform gap analysis for GT&O in connection with technology related laws and regulations and identify and elevate issues and potential solutions; influence and assist process and control owners to close gaps in their controls and adopt processes in support of legal and regulatory requirements
• Prepare and submit timely regulatory responses and evidence as required
• Support external audit (e.g. SOC/SOX) activities, including scope & coverage, walkthroughs, testing and annual attestations
• Support client technology and security assessments of Prudential, including due diligence questionnaires and client calls to review Prudential's policies and controls
• Support third party security due diligence reviews, including review of third-party SIG responses against Prudential's requirements
• Assist in managing GT&O's records management program in support of enterprise requirements
• Foster a culture of continuous improvement and excellence, and lead initiatives to drive efficiencies and synergies in the implementation of risk management practices and other enterprise oversight functions

The Skills & Expertise You Bring

• Bachelor's Degree
• Minimum of 3-5 years' experience in technology risk, compliance, or similar roles
• Core Risk/Governance Technical Skills: Should have technical acumen related to IT processes, practices and capabilities with subject matter knowledge of components and risks within Cloud, Information & Cyber Security, Agile development methodology, Computer and Network Infrastructure and Privacy
• Knowledge of relevant global IT risk management frameworks (e.g., NIST, ITIL, ISO, COBIT, SANS) for development, maintenance, and enterprise alignment of the risk framework and taxonomy with enterprise processes, risk frameworks and reporting constructs
• Comprehension of relevant client, legal, and regulatory requirements and ability to perform compliance-based gap analysis using regulatory based frameworks, such as System & Organization Control (SOC 1 & 2) Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), European Union General Data Protection Regulation (GRPR), and California Consumer Privacy Act (CCPA)
• Ability to apply risk leadership skills in execution of IT operational risk and control assessments and third-party risk assessments, to determine risk opinion that product technologies and capabilities are fit for the risk appetite of the organization
• Knowledge of IT Governance, Risk, and Compliance (GRC) software (e.g., RSA Archer, IBM Open Pages, SAP GRC, ServiceNow GRC) for effective organization and utilization of IT risk data
• Self-confident, willing to challenge status quo, trustworthy and high integrity
• Demonstrated ability to influence with comfort and ability working between organizational structures to effect significant change, self-starter comfortable working independently and within a team environment
• Exceptional verbal and written communication skills, including the ability to connect, build relationships and influence business leaders, across all levels
• Lead and effectively leverage diverse ideas, experiences, thoughts and perspectives to the benefit of the organization.
• Knowledge of business concept tools and processes that are needed for making sound decisions in the context of the company's business
• Ability to learn new skills and knowledge on an on-going