Operational Risk Advisor

Synovus • Columbus, GA

1d

About The Position

The IT Risk Analyst will lead the collaboration and implementation of the IT risk assessment framework across all aspects of Technology for the bank. IT Risk Analysts use their knowledge and expertise to examine systems and procedures to identify potential adverse events, including hardware and software failures, physical disasters, malicious intruders, malware, denial of service attacks, etc. Responsibilities include assessing the adequacy of the IT strategy, business continuity / disaster recovery plans, threats to the systems and calculating the impact of potential adverse events.

Requirements

• Bachelor's degree in related field or an equivalent combination of education and experience.
• Three years experience identifying, documenting and evaluating IT risk and controls; prior work experience in the capacity of Technology, Information Security, Risk Management, IT Audit, or related field is required.
• Strong understanding of technology and information security concepts
• Strong analytical and problem solving skills including the ability to probe sensitive issues while maintaining the highest level of integrity and objectivity
• Have a grasp on technology and security standards to the degree required to provide credible challenge; Stay knowledgeable of current advances in all areas of information technology
• Ability to perform multiple tasks in a fluid environment and work both independently and as a team member
• Strong verbal, written communication skills, and the ability to interact with various levels of management
• Proficiency in computer applications including Microsoft Office products (Word, Excel and PowerPoint) and other applications
• Working knowledge of IT General Controls (ITGC) and technology related frameworks such as COBIT, NIST Cyber Security, ITIL/ITSM
• General understanding of the components of an Operational Risk Management (ORM) framework

Responsibilities

• Develop an understanding of Synovus' Operational Risk Management (ORM) framework as it applies to the Technology organization and the COBIT 2019 Framework.
• Identify risk and controls that meet specific criteria that maps to COBIT Management Objectives.
• Lead Technology partners in Risk Control Self-Assessment (RCSA) workshops to assess IT risks and document the results. Work with management to document action plans to close control gaps.
• Identify and develop new metrics based on the operational and technology risk frameworks.
• Investigate and document technology events including incidents, loss events, audit findings, regulatory findings, etc.
• Each team member is expected to be aware of risk within their functional area. This includes observing all policies, procedures, laws, regulations and risk limits specific to their role. Additionally, they should raise and report known or suspected violations to the appropriate Company authority in a timely fashion.
• Performs other related duties as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level