IT Security Manager

Sedgwick•Telecommuter PA, PA

2d•Onsite

About The Position

By joining Sedgwick, you'll be part of something truly meaningful. It’s what our 33,000 colleagues do every day for people around the world who are facing the unexpected. We invite you to grow your career with us, experience our caring culture, and enjoy work-life balance. Here, there’s no limit to what you can achieve. Newsweek Recognizes Sedgwick as America’s Greatest Workplaces National Top Companies Certified as a Great Place to Work® Fortune Best Workplaces in Financial Services & Insurance PRIMARY PURPOSE OF THE ROLE: To manage and advance the IT security, risk and audit compliance program including planning, scheduling, coordinating, reviewing and reporting of the work of the department; to supervise, coach and train staff; to develop procedures and audit programs and policies; to represent Sedgwick IT to clients, carriers and external stakeholders, and to assist IT management on projects as needed. ARE YOU AN IDEAL CANDIDATE? We are looking for enthusiastic candidates who thrive in a collaborative environment, who are driven to deliver great work, are customer-oriented and are naturally empathetic.

Requirements

Bachelor's degree from an accredited college or university required.
At least two of the following credentials required (additional credentials are preferred): Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information System Security Professional (CISSP), or Certified Information Systems Auditor (CISA) designation
Ten (10) years of information technology, accounting or closely related industry experience or equivalent combination of education and experience required to include four (4) years project management and/or supervisory experience in a team environment.
Excellent understanding of internal control and data security concepts and their applications
Excellent knowledge of IT compliance frameworks (i.e. SSAE 16 and ISO 2700x frameworks at minimum)
Excellent knowledge of IT risk management, risk mitigation, data protection and security, and investigation procedures
Solid knowledge of Sarbanes-Oxley Act provisions and methodologies for achieving compliance
Excellent oral and written communication, including presentation skills
PC literate, including Microsoft Office products
Creative and analytical approach to problem solving
Excellent detail orientation, time management skills and organization skills
Excellent interpersonal skills and ability to work with various levels within the organization
Ability to maintain confidential information in professional manner
Ability to maintain profession demeanor in times of high stress
Ability to manage multiple projects and set priorities
Ability to work in a team environment and independently
Ability to meet or exceed Performance Competencies
Work environment requirements for entry-level opportunities include – Physical: Computer keyboarding Auditory/visual: Hearing, vision and talking Mental: Clear and conceptual thinking ability; excellent judgement and discretion; ability to meet deadlines

Nice To Haves

MBA or relevant Masters degree with a major in accounting or information technology field strongly preferred.

Responsibilities

Performs advanced, specialized and/or managerial IT compliance working the areas of regulatory compliance, data security and protection, risk assessment and risk mitigation; manages complex audits both internally and externally including third party vendor audits and client-initiated IT audits; performs critical project management duties in the planning, scheduling, coordinating, reviewing and reporting of the work of IT compliance teams; and provides expertise in IT compliance standards and performance criteria, data security requirements and information technology skills.
Develops and maintains productive internal and external stakeholder relationships; communicates with company management clients, carriers, vendors and other stakeholders as needed during IT compliance activities.
Directly interacts with clients, carriers and other external stakeholders in critical or sensitive communications regarding IT compliance and security.
Responds to client, carrier and legal counsel inquiries regarding IT compliance and security matters.
Responsible for teaching, training and coaching staff and for creating appropriate awareness programs within IT and the enterprise.
Develops procedures, schedules, priorities and programs for achieving IT compliance objectives and goals.
Recommends and executes new policies at department and enterprise level.
Prepares audit and compliance reports, analysis and recommendations using advanced writing skills.
Assesses risk factors to identify high risk areas within IT.
Develops risk remediation plans and manages related projects to completion.
Identifies and communicates changes in professional and industry standards, laws, guidelines and audit requirements to department and enterprise personnel.
Consults with and advises administrators, management and staff on various operational control issues related to computerized information systems as needed; attends and/or conducts internal and external meetings; and leads recruitment and hiring of IT audit, compliance and security colleagues.
Attends, presents and/or participates in continuing professional education classes and training courses.
Follows up on audit findings to ensure that management has taken corrective action(s).
Assists and trains other audit staff in the use of computerized audit techniques and in developing methods for review and analysis of computerized information systems.
Maintains a broad knowledge of state-of-the-art technology, equipment, and/or systems.
Conducts or supervises IT operational, compliance, financial and investigative audits as required.
Manages IT compliance budget.
Recommends and manages commitment of IT budget funds where appropriate for Compliance and Risk management purposes.
Performs other duties as assigned.
Supports the organization's quality program(s).
Travels as required.
Administers company personnel policies in all areas and follows company staffing standards and training recommendations.
Interviews, hires and establishes colleague performance development plans; conducts colleague performance discussions.
Provides support, guidance, leadership and motivation to promote maximum performance.