The IT Risk team functions include assessing and mitigating risk through internal risk assessments and risk assessments for 3rd party vendors, providing client sales management services, providing security awareness training, maintaining the phishing awareness program, and developing and maintaining IT policies and procedures. Secondary responsibilities include delivering security recommendations for business and technology initiatives and security awareness month coordination.

RESPONSIBILITIES

Perform security risk assessments for business and technology initiatives such as new vendors and supporting software by reviewing security questionnaire responses, utilizing web app scanning technology and open-source software scanning technology, reviewing security compliance reports such as ISO27001, SOC 2, CSA, SIG, and more. Provide security recommendations to system and technology owners. Assist in coordinating phishing awareness training and simulations. Assist in developing IT security and compliance trainings. Assist in coordinating security awareness month training and activities. Maintain and update policies and procedures related to IT and regulatory compliance. Provide compliance sales management services. Review critical vendors on a recurring cycle.