ETS Risk Principal Analyst- Technology and Cyber Risk

3 weeks ago

JOHNSTON, United States Citizens Full time

Description

As the ETS Risk Principal Analyst in Technology and Cyber Risk, you will be responsible for identifying, assessing, and mitigating risks associated with technology and cybersecurity within the banking sector. Your role is crucial in ensuring the organization’s resilience against cyber threats and maintaining robust risk management practices.

Key Responsibilities

  1. Risk Identification and Assessment:
    • Conduct comprehensive risk assessments for technology and cybersecurity initiatives.
    • Identify emerging threats and vulnerabilities in the IT landscape.
    • Develop and maintain a risk register for tracking and managing identified risks.
  2. Risk Mitigation and Control:
    • Implement risk mitigation strategies and controls to address identified risks.
    • Collaborate with IT and security teams to ensure effective deployment of security measures.
    • Monitor the effectiveness of risk controls and make necessary adjustments.
  3. Governance and Compliance:
    • Ensure compliance with regulatory requirements and industry standards. 
    • Develop and enforce technology and cybersecurity policies and procedures.
    • Support and cooperation with 2nd and 3rd LODs in audits and reviews to ensure adherence to governance frameworks.
  4. Incident Management:
    • Support activities related with risk in cybersecurity incidents and breaches.
    • Review and asses post-incident analysis to identify risk associated with incidents
  5. Reporting and Communication:
    • Prepare and present risk reports to senior management and the board.
    • Establish and maintain an effective business relationship with business partners, key project stakeholders, Second Line of Defense and subject matter experts to advise and support the Technology Services Risk Leadership Team.
    • Communicate risk management strategies and updates to relevant stakeholders.
    • Foster a risk-aware culture within the organization through training and awareness programs.
  6. Innovation and Continuous Improvement:
    • Stay updated on the latest trends and advancements in technology and cybersecurity.
    • Identify opportunities for innovation in risk management practices.
    • Continuously improve risk management processes and tools.
    • Actively support automation in testing process.

Awareness with Tools and Resources

  • Risk Management Frameworks: CRI, NIST, ISO 27000 family  
  • Security Tools: Vulnerability scanners, SIEM (Security Information and Event Management) systems, endpoint protection solutions.
  • Compliance Tools: GRC (Governance, Risk, and Compliance) platforms, audit management software.
  • Incident Response Tools: Incident management platforms, forensic analysis tools.

Best Practices

  • Regularly update risk assessments to reflect the evolving threat landscape.
  • Foster collaboration between IT, security, and business units to ensure comprehensive risk management.
  • Promote a culture of continuous improvement and innovation in risk management practices.
  • Engage in ongoing professional development to stay current with industry trends and best practices.

Qualifications

  • 7+ years of experience in Information Technology, Information Security, Data Management, IT Service Management and Operations and/or IT Resilience
  • 7+ years of Audit or Risk Management experience gained from working in financial services industry, preferably in Technology or Information Security.
  • Strong business writing skills
  • Ability to effectively communicate with all levels of the organization
  • Project management skills to support multiple complex assignments
  • Strong influencing and negotiating skills
  • Proficient use of Microsoft Office Suite

Platform Specific Skills:

  • Technical knowledge of various platforms (e.g. Cloud, Microsoft, Unix, Middleware. APPs)
  • Writing, Project Mgt, GRC Skills

Education:

  • Bachelor’s degree or equivalent experience required

Certifications Preferred:

  • Certified Information Systems Auditor (CISA)
  • Certified in Risk and Information Systems Control (CRISC)
  • AWS / Azure Cloud Certifications
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP)

Hours and Work Schedule: 3 days in the office, 2 remote

Hours per Week:  40

Work Schedule:    8:00am to 5:00pm

                             Monday through Friday

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

At Citizens, we are committed to fostering an inclusive culture that enables colleagues to bring their best selves to work every day. Employment decisions are based solely on experience, performance, and ability. Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression (including transgender individuals who are transitioning, have transitioned, or are perceived to be transitioning to the gender with which they identify), genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws.

Equal Employment and Opportunity Employer

Citizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates.

Why Work for UsAt Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.

  • CSI Principal Control Analyst

    4 weeks ago

    JOHNSTON, United States Citizens Full time

    DescriptionThe Principal Control Analyst, is responsible for conducting supervisory reviews of submitted investment / insurance business and may be responsible for executing final principal determination for the submitted business on behalf of the firm. The incumbent is also responsible for solving a range of straightforward problems and receives a moderate...

  • Technology Risk Manager- Security, Monitoring and Testing

    1 month ago

    Johnston, United States Citizens Full time

    DescriptionAs a part of our team, you’re made ready for a fulfilling career with exciting new challenges and opportunities to stretch yourself! As an Enterprise Technology & Security, Monitoring and Testing Risk Manager, you will partner with the First Line Risk Managers, whom directly support the Technology and Cybersecurity Organizations, and you will be...

  • Technology Risk Manager- Security, Monitoring and Testing

    2 months ago

    JOHNSTON, United States Citizens Full time

    DescriptionAs a part of our team, you’re made ready for a fulfilling career with exciting new challenges and opportunities to stretch yourself! As an Enterprise Technology & Security, Monitoring and Testing Risk Manager, you will partner with the First Line Risk Managers, whom directly support the Technology and Cybersecurity Organizations, and you will be...

  • Credit Risk Strategist

    3 weeks ago

    Johnston, United States Citizens Financial Group, Inc. Full time

    The Credit Risk Professional will be a critical member of the Unsecured Consumer Lending Credit Risk Team, generating the statistical analysis used to inform credit strategy.Will work with our data resources to formulate policy recommendations, communicate those recommendations to important stakeholders, and collaborate with diverse teams to see those...

  • Operational Risk Manager

    3 weeks ago

    Johnston, Rhode Island, United States Citizens Full time

    Operational Risk Management RoleThe Operational Risk Management (ORM) Methodology Team at Citizens is seeking an experienced Operational Risk Manager to assist and support the planning, execution, and ongoing review of the Operational Risk Management Methodology Frameworks. This includes Risk and Control Self-Assessment (RCSA), Issue and Findings Management,...

  • Construction Risk Engineer

    3 months ago

    JOHNSTON, United States Disability Solutions Full time

    FM is a leading property insurer of the world's largest businesses, providing more than one-third of FORTUNE 1000-size companies with engineering-based risk management and property insurance solutions. FM helps clients maintain continuity in their business operations by drawing upon state-of-the-art loss-prevention engineering and research; risk management...

  • Senior Risk Auditor

    4 weeks ago

    Johnston, United States Citizens Full time

    Job Title: Senior AuditorAt Citizens, we are seeking a highly skilled Senior Auditor to join our Capital Markets, Market Risk, and Model Risk team. As a key member of our Internal Audit team, you will play a critical role in ensuring the effectiveness of our control environment, risk management practices, and culture.Key Responsibilities:Lead and/or...

  • Risk Director, Investment Banking

    2 weeks ago

    Johnston, United States Citizens Full time

    Description The Risk Director, Investment Banking is a leadership role on the Commercial Banking Risk team, which is a front-line unit risk function. The Risk Director will support the investment banking business of Citizens, which includes syndicated loan underwriting and sales & trading; debt and equity securities underwriting and sales & trading, and...

  • Risk Director, Investment Banking

    2 weeks ago

    Johnston, United States Citizens Full time

    Description The Risk Director, Investment Banking is a leadership role on the Commercial Banking Risk team, which is a front-line unit risk function. The Risk Director will support the investment banking business of Citizens, which includes syndicated loan underwriting and sales & trading; debt and equity securities underwriting and sales & trading, and...

  • Construction Risk Management Specialist

    3 weeks ago

    JOHNSTON, United States FM Global Full time

    Job SummaryFM Global is seeking a highly skilled Construction Risk Engineer to join our team. As a Construction Risk Engineer, you will be responsible for delivering construction risk engineering products and services that enable our clients to enhance the resilience of their construction projects, reduce exposure to construction-related loss events, and...

  • Cyber Defense Specialist

    3 weeks ago

    Johnston, United States Citizens Financial Group, Inc. Full time

    Cyber Defense Specialist Job DescriptionThis 1st shift opportunity is an individual contributor role on the Cyber Threat Detection (CTD) team. In this role, you will be responsible for performing security monitoring, intrusion analysis, incident handling, data loss prevention, security incident management, malware detection/eradication, and recognizing...

  • Director of Quality and Risk Management

    3 weeks ago

    Johnston, United States HealthSouth Full time

    Quality and Risk Director Career OpportunityAre you a highly regarded and valued professional with expertise in Quality and Risk Management? Do you seek a career that aligns with your personal values and provides a profound sense of belonging and the opportunity to make a meaningful difference in patients' lives? Look no further than Encompass Health, the...

  • Operational Risk Management Senior Manager

    3 weeks ago

    Johnston, Rhode Island, United States Citizens Full time

    Operational Risk Management Senior ManagerThe Operational Risk Management (ORM) Methodology Team at Citizens is seeking an experienced Operational Risk Management Senior Manager to assist and support the planning, execution, and ongoing review of the Operational Risk Management Methodology Frameworks. This includes Risk and Control Self-Assessment (RCSA) and...

  • Risk Director Investment Banking Leader

    3 weeks ago

    Johnston, Rhode Island, United States Citizens Full time

    Job Title: Risk Director Investment BankingJob Summary:The Risk Director Investment Banking is a leadership role on the Commercial Banking Risk team, which is a front-line unit risk function. This position supports the investment banking business of Citizens, including syndicated loan underwriting and sales & trading, debt and equity securities underwriting...

  • Operational Risk Management Senior Leader

    3 weeks ago

    Johnston, Rhode Island, United States Citizens Full time

    Operational Risk Management Senior LeaderThe Operational Risk Management (ORM) team at Citizens is seeking an experienced Operational Risk Management Senior Leader to assist in the planning, execution, and ongoing review of the Operational Risk Management Methodology Frameworks.This role will involve assisting with the implementation of program policies, Key...

  • Sr Cyber Defense Ops Spec

    5 days ago

    JOHNSTON, United States Citizens Full time

    Description3 Days Hybrid from any of our locations in Johnston RI Role is not relocation eligible.  Senior Cyber Defense Ops Specialist The Senior Cyber Defense Operations Tactical Support Specialist will be a key contributor within the Cyber Security and Resilience (CS&R) Cyber Defense team and will be responsible for working closely with all the Cyber...

  • Construction Risk Mitigation Specialist

    3 weeks ago

    JOHNSTON, United States FM Global Full time

    FM Global is a leading property insurer of the world's largest businesses, providing more than one-third of FORTUNE 1000-size companies with engineering-based risk management and property insurance solutions.We are seeking an experienced engineer to join the Climate and Structural Resilience team as a Construction Risk Mitigation Specialist. This person will...

  • Field Examiner

    3 weeks ago

    Johnston, Rhode Island, United States Citizens Financial Group, Inc. Full time

    Job SummaryThe Commercial Field Examination team at Citizens Financial Group, Inc. supports the underwriting of facilities to New/Existing borrowers, Renewals, Annual Reviews, and Special Requests. As a Field Examiner, you will participate in on-site evaluation of an existing or prospective borrower's books, records, and operations to ensure compliance with...

  • Construction Risk Engineer

    4 weeks ago

    Johnston, RI , USA, United States Factory Mutual Global Full time

    Job SummaryThis role is responsible for delivering construction risk engineering products and services to enable Factory Mutual Global's clients to enhance the resilience of their construction projects, reduce exposure to construction-related loss events, and ensure a seamless transition to operational risk.Key ResponsibilitiesIdentify, assess, and improve...

  • Construction Risk Engineer

    2 months ago

    Johnston, RI, United States FM Global Full time

    FM is a leading property insurer of the world's largest businesses, providing more than one-third of FORTUNE 1000-size companies with engineering-based risk management and property insurance solutions. FM helps clients maintain continuity in their business operations by drawing upon state-of-the-art loss-prevention engineering and research; risk management...