IT Risk & Compliance Consultant

Sammons Financial Group • Sioux Falls, SD

4d

About The Position

Provide risk consulting for the IT Risk and Compliance function to identify, manage, and monitor IT risk. Conduct risk assessments, track, monitor and report on IT risk, collaborate with internal and external auditors, ensure policy and regulatory compliance, and assist with the development and implementation of IT risk management methodologies. Mentor IT Risk and Compliance analysts. Support the IT Security and Risk Management team, the Information Technology department, and the entire Company in monitoring and managing information risks.

Requirements

• Broad knowledge of Information Risk Management concepts and how these concepts apply to the business
• Strong knowledge of IT, information security and information risk management domain areas such as Information Systems Security, Systems Development Life Cycle Methodology, Testing Methodologies, Back-up and Recovery, Risk Management, Risk Assessment, Data Retention and Recovery, Business Continuity, Disaster Recovery, Leadership and Communication, and Security Awareness
• Specific knowledge of risk management principles and models
• Strong understanding of financial services, insurance, business and technologies
• Knowledge of legislation and regulations pertaining to the insurance industry
• Excellent understanding of the organization’s goals and objectives
• Aptitude for business engagement, ongoing education to business partners of the value of information risk management
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Excellent written, oral, and interpersonal communication skills
• Ability to conduct research into existing and emerging security and compliance issues as required
• Ability to present ideas in both business-friendly and IT-friendly language
• Highly self-motivated and directed
• Team-oriented and skilled in working within a collaborative environment
• Criminal background check required.

Nice To Haves

• Bachelor's Degree in Business, Computer Science, IT, Risk Management or related field
• Minimum 10 years' experience in risk management, information security and/or internal controls including experience as an IT Auditor, IT Security Analyst or IT Risk Analyst
• Knowledge of Life Insurance and Annuity products, insurance processes and methodologies

Responsibilities

• Provide IT Risk and Compliance support to the Company while serving as Subject Matter Expert (SME) for the IT Risk and Compliance team.
• Develop and implement IT risk management methodologies.
• Develop and implement IT risk assessment processes.
• Conduct regular Company information security risk assessments, consulting with other IT Risk and Compliance team members.
• Mentor IT Risk and Compliance analysts.
• Train IT staff in conducting targeted information security risk assessments.
• Develop and implement IT risk and security policies.
• Monitor information risks, mitigation and remediation efforts; report and present risk to IT Management.
• Understand and accountable for ensuring compliance with IT risk and security regulatory requirements.
• Work with IT and entire SFG staff to ensure their compliance with IT and risk security policies.
• Provide expertise to other IT Risk and Compliance team members with validation of test results and problem analysis and resolution.
• Develop and implement IT controls framework.
• Work with IT to assist in the selection of appropriate control activities; measure and monitor those control activities.
• Provide IT risk consulting to SFG IT staff.
• Consult on other IT Risk and Compliance team activities.
• Continuously monitor the risk function, identifying, developing and implementing process improvements using discretion and trusted judgment.
• Commitment to embrace Sammons Financial Group Companies shared values (Accountability, Connection, Openness, Respect and Integrity).
• As stated within the Company Attendance and Punctuality policy, regular attendance is required and expected in order to meet the business service levels and workflow demands.
• Participate in other initiatives and/or projects as necessary.

Benefits

• Comprehensive health coverage for you and your family, including Medical, Dental, Vision, HSA & FSA options, and term life insurance.
• Competitive compensation with a performance-based incentive program tied to clear goals and individual and/or company success.
• 100% company-funded Employee Stock Ownership Plan (ESOP), plus automatic enrollment in our 401(k).
• Friday afternoons off year-round, generous paid time off, and paid holidays.
• Paid development time, tuition reimbursement, and professional development opportunities across industry, individual, and leadership programs.
• Volunteer time off, and our company nonprofit matching gift program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior