IT GRC Program Administrator II

United Wholesale Mortgage•Pontiac, MI

8d•Onsite

About The Position

As an IT GRC Program Administrator II at UWM your focus will be to lead information security initiatives that minimize risk and maximize compliance by facilitating assessments, managing audit fulfillment and remediation of risks, governing of business data and records, monitoring adherence to information security controls and compliance standards, supporting business continuity and disaster recovery compliance, leading specific security initiatives, and coaching and mentoring to improve information security awareness and standards. Plan, coordinate, perform and report on work assignments based on assessments and priorities established by the Information Security Team Lead.

Requirements

Bachelors Degree in IT, Computer Science, Technology, Engineering, and Mathematics, or Business Administrationor Relevant Certifications from SANS, ISACA, CompTIA, ISC2, etc.
2 to 4 years of experience analyzing cybersecurity control effectiveness
2 to 4 years Risk Management, Disaster Recovery and Business Continuity Planningor Cyber Secutiry Managment
Understanding of Security Frameworks, Regulations, and standards. Including but not limited to, NIST, CIS, COBIT, SOC, etc.
Understanding of Federal and State Regulations, i.e. SOX, SOC 1 & 2, NYDFS, CCPA, HIPAA, etc.
Control Assessment Techniques, such as questionnaires, On-site visits, and Penetration Testing.
Excellent oral, written, negotiation, and presentation skills
Ability to communicate complex concepts
Strong analytical and critical thinking skills, with ability to achieve goals
Self-directed, and able to work independently
Demonstrated aptitude for learning modern technologies
Ability to prioritize and manage multiple concurrent projects, and work within critical timelines
Strong leadership, interpersonal, and organizational skills
Ability to work within a fast-paced team environment, effective interacting with internal and external personnel
Demonstrated experience identifying potential opportunities and process improvements
High degree of literacy in information system development processes, end-user computing controls, cloud systems implementation, infrastructure management, and information security practices
Onsite Presence required

Responsibilities

Translating IT controls informing clients and team members on technical, policy, and functional issues.
Experience in Policy, Procedure, and standards documentation, review, and creation
Research Policy, Procedure, and standards documentation, review, and creation
Develop and administer training and awareness initiatives
Support, mentor, and coach team members
Support Audits and Preparing audit responses for both internal and external agencies
Support, Evaluate, and research compensating security controls

Benefits

Paid Time Off (PTO) after just 30 days
Additional parental and maternity leave benefits after 12 months
Adoption reimbursement program
Paid volunteer hours
Paid training and career development
Medical, dental, vision and life insurance
401k with employer match
Mortgage discount and area business discounts
Free membership to our large, state-of-the-art fitness center, including exercise classes such as yoga and Zumba, various sports leagues and a full-size basketball court
Wellness area, including an in-house primary-care physician’s office, full-time massage therapist and hair salon
Gourmet cafeteria featuring homemade breakfast and lunch
Convenience store featuring healthy grab-and-go snacks
In-house Starbucks and Dunkin
Indoor/outdoor café with Wi-Fi