Lead, IT Assurance

Green Dot Corporation • Tampa, FL

1d • Hybrid

About The Position

Green Dot is seeking a strong Lead, Senior IT Assurance Analyst to help lead its IT Assurance function. This function reports to the Company’s VP of Information Security, GRC, as part of the “Second Line of Defense.” The position involves leading the IT Assurance function, which provides control assurance over Green Dot’s technology infrastructure in accordance with Company policy, regulatory requirements, and industry best practices and standards. This role will be responsible for technology and security control performance testing, including evaluation of the Company’s technology processes, infrastructure, and third-party connections in accordance with FFIEC and related industry guidance. The evaluation will result in control testing results as to whether information systems are safeguarding assets, maintaining data integrity, and operating effectively to achieve the organization's goals and objectives. This includes but is not limited to Cybersecurity / Information Security, Cloud Computing, Technology Operations, Business Continuity Management/Disaster Recovery, IT Governance & Strategy, Systems Development Lifecycle (SDLC), and System Change Management. This position is classified as structured hybrid, with an expectation of a minimum of three (3) days per week working in the office and flexibility to work remotely on the remaining days.

Requirements

• Bachelor’s degree in Information Systems, Management Information Systems, Computer Science, Technology, or other related fields.
• Minimum 5 years in IT security/audit/control assessment role with IT controls testing experience.
• Strong understanding of auditing the following Technology disciplines: SDLC/Change Management, BC/DR, Technology Operations, Information Security, Cloud Computing, Data Governance.
• Experience with technology infrastructure risk, controls and technology monitoring tools, including Network Infrastructure & Architecture, O/S, Cloud Computing, and Database security control reviews.
• Knowledge of Cybersecurity controls and industry guidance & best practices such as NIST, FFIEC, COBIT, GLBA.
• Experience with security control testing and performing security assessments.
• General understanding of financial and information systems and processes and ability to apply that knowledge in conducting IT control performance testing.
• Executive presence and good communication skills (written and oral).
• Enthusiastic, self-motivated, willing to be challenged and take personal responsibility.
• Ability to effectively prioritize multiple projects, meet deadlines, and stay within budget.
• Ability to provide guidance to audit team peers and IT Management on IT control issues.
• Candidates with or pursuing CISA, CISSP, or CISM certifications.
• Ability to work in the U.S. without sponsorship.
• Ability to meet the location requirement outlined above (New York, NY; Birmingham, AL; Miami, FL; Tampa, FL; Blue Ash or Cincinnati, OH; or Los Angeles, CA).

Nice To Haves

• Prefer 2 years leading engagements.
• Continuous IT control testing experience is a plus.
• Financial Services, Payment Processors, PCI, SOC, Regulatory and/or Public company experience is a plus.
• Experience with Information Security tools and methods, and other audit automation or Service management tools a plus.

Responsibilities

• Assuming the role of enhancing the department’s Technology Control Strategy and building upon the technology control performance testing plans and procedures.
• As part of IT, planning and executing test procedures including working with IT and Information Security to evaluate system and automated controls.
• Acting as a subject matter expert and resource in evaluation of IT infrastructure, application controls, information security, database controls, system implementation reviews, and pre/post implementation reviews.
• Providing value-added recommendations to management to improve the control environment, increase operational effectiveness or improve quality of products and services provided by the Company.
• Building effective relationships and partner closely with senior technology and security leadership.
• Performing pre and post implementation reviews of Company’s strategy initiatives including identifying new/emerging risks and evaluating the impact of these risks within the overall control environment.
• Drafting clear concise control performance reports, summarize findings, and aligning comprehensive management action plans with the process owner for each testable entity.
• Preparing quarterly reports and present to executive committees.
• Developing accurate and complete control performance testing results and documentation in alignment with policy and industry frameworks.
• Configuring the controls management application within the GRC tool to source control performance testing results.
• Performing ongoing IT and security assessments across Green Dot’s main system environments to identify risks and critical flaws within the company’s networks, applications and operating systems.
• Testing the company’s internal systems and third-party connections to validate technical controls and detect any computer and information security weaknesses.

Benefits

• Green Dot is committed to providing an inclusive and accessible hiring experience for all candidates. If you require a reasonable accommodation during any part of the application or interview process, we encourage you to let us know. We will work with you to meet your needs in a way that respects your privacy and ensures equal opportunity. Our goal is to support every applicant in showcasing their talents and potential.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 251-500 employees