IT Risk Management and Compliance Specialist (Wickliffe, OH, US, 44092-2298)

Lubrizol Corp-posted about 1 month ago

Full-time • Mid Level

Hybrid • Wickliffe, OH

5,001-10,000 employees

Chemical Manufacturing

Resume

Match Score

Upload and Match ResumeTrack Jobs with Teal

As an IT Risk Management and Compliance Specialist, you'll be at the forefront of our innovation, utilizing the governance, risk and compliance programs of the company's global Information Security program. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing and enhance modern life. This role involves actively identifying and facilitating the elimination or mitigation of risks throughout the global environment, both internally and externally. You'll partner with technical teams to advise on applicable control requirements and potential solutions, ensuring that third-party relationships are managed effectively and securely. In addition to Third Party Risk Management, you'll also be involved in internal auditing activities. You will participate in measuring and reporting compliance with IT policies and standards, conducting audits to assess the effectiveness and efficiency of risk management processes. This includes evaluating internal controls, identifying areas for improvement, and recommending and implementing enhancements to the program. The IT Risk Management and Compliance Specialist plays a critical role in ensuring the global impact and importance of Lubrizol's Information Security program by managing third-party risks, conducting internal audits, and responding to external requests

Execute the IT Risk Management processes to identify, assess, evaluate, and treat risks, ensuring the global impact and importance of Lubrizol's Information Security program.
Recommend and implement Risk Management Program process improvements to enhance the effectiveness and efficiency of risk management practices.
Conduct technology and operational risk and compliance assessments to identify potential risks and ensure compliance with internal policies and external regulations.
Partner with technical teams, advising on applicable control requirements and proposing potential solutions to address identified risks, fostering a secure and compliant environment.
Conduct compliance assessments of controls for in-scope systems, including remediation assessments and audit-readiness assessments, to ensure adherence to IT policies and standards.
Identify control deficiencies and maintain records of deficiency details, including management response documentation and evidence of exposure checks, to track and address areas for improvement.
Collaborate on the 3rd Party Risk Management program, managing and mitigating risks associated with third-party relationships.
Maintain and improve the Information Security Policy Set, ensuring that policies are up to date, aligned with industry best practices, and effectively communicated to employees.
Provide insight and recommendations to leadership as part of a global information security team, contributing to continuous improvement efforts.
Perform other information security activities as needed to support the overall objectives of the Information Security program at Lubrizol

Bachelor's degree in Information Technology (IT), Information Security or a related field, providing a strong foundation in IT and Information Security principles and practices.
Minimum of 1 year of relevant industry and professional experience in areas such as risk management, audit, third-party risk, operational risk, information security, or related fields.
Knowledge of third-party risk management, including the ability to assess and manage risks associated with external vendors and partners. Experience with IT risk assessments and operational processes is also valuable, as well as familiarity with techniques for implementing regulatory requirements.
Understanding of security domains, including identity and access management, authentication, encryption, application security, network security, vulnerability and patch management, information security metrics, policies, standards, and procedures.
Knowledge of ISO and NIST security standards, which are widely recognized frameworks for information security management.
Knowledge of CIS (Center for Internet Security) benchmarks and controls is preferred.
Proficiency in Microsoft Windows-based operating systems and collaboration tools, enabling effective communication and collaboration within the organization.
Demonstrated understanding of risk management processes, including the ability to identify, assess, evaluate, and treat risks in a systematic and structured manner.
Knowledge of basic IT security principles, networking concepts, active directory, and SAP ECC/S4 concepts.
Familiarity with risk management frameworks, such as ISO 31000 or COSO ERM, providing a structured approach to managing risks and ensuring compliance with industry standards.
Experience in documenting issues and solutions to assist end users and co-workers in understanding and resolving similar problems, promoting knowledge sharing and collaboration within the organization.
Strong analytical and problem-solving skills, enabling the ability to analyze complex information, identify patterns, and make informed decisions to mitigate risks.
Knowledge of regulatory compliance requirements, such as GDPR, HIPAA, or SOX, depending on the industry and region of operation.
Familiarity with data privacy and protection principles, including data classification, data retention, and data breach response.
Understanding of incident response and business continuity planning, including the ability to develop and test incident response plans.
Knowledge of cloud computing security principles and best practices, including familiarity with cloud service provider security frameworks (e.g., AWS, Azure, Google Cloud).
Strong project management skills, including the ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines.
Excellent communication and presentation skills, with the ability to effectively communicate complex technical concepts to both technical and non-technical stakeholders.
Continuous learning mindset, staying updated with the latest trends, technologies, and regulatory changes in the field of IT risk management and compliance

Preferred certifications include CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), or CISA (Certified Information Systems Auditor).
Knowledge of CIS (Center for Internet Security) benchmarks and controls is preferred.

Competitive salary with performance-based bonus plans
401K Match plus Age Weighted Defined Contribution
Competitive medical, dental & vision offerings
Health Savings Account
Paid Holidays, Vacation, Parental Leave
Flexible work environment

Track Jobs with Teal

Job Search Resources

•

Resume Builder

•

Resume Examples

•

Cover Letter Examples

IT Risk Management and Compliance Specialist (Wickliffe, OH, US, 44092-2298)

Job Search Resources

Tools

Career Hubs

Guides

Company