Specialist, Cyber Technology Risk Professional

Nationwide•Columbus, OH

13h•$95,500 - $177,500•Hybrid

About The Position

If you’re passionate about being part of a dynamic organization that enables a Fortune 100 company with nearly $70 billion in annual sales to drive innovation and adopt new technologies that deliver business results, then Nationwide’s Technology team could be the place for you! At Nationwide®, “on your side” goes beyond just words. Our customers are at the center of everything we do and we’re looking for associates who are passionate about delivering extraordinary care. This role will work a hybrid schedule coming into the Columbus, Ohio, Des Moines, Iowa, or Scottsdale, Arizona office 2 days (Tuesday & Thursday) per week. Remote internal associates may also be considered. Information Risk Governance (IRG) consists of multiple teams and subject matter experts, assessing risk for a multitude of technologies, processes, and controls. The Financial Reporting Controls team, testing the technology controls for applications and infrastructure supporting business processes, has an exciting opportunity to contribute to the management of emerging risks within the critical technology landscape. As a Specialist, Cyber Technology Risk Professional, you'll help deliver technology control testing results for maintaining and strengthening the organization’s risk posture. Additionally, you’ll look at internal processes to drive continuous improvement to our processes and standards and contribute to the environment with efficiencies and innovation. You’ll be relied upon to work closely with internal clients to harvest good working relationships and building a strong rapport to obtain necessary documentation and provide advisement for compliance purposes. The technology landscape is rapidly evolving, so it will be imperative to navigate through the changing business environments and associated risks. If you’re enthusiastic about delivering secure technology solutions to support a company providing extraordinary care to its customers, then Nationwide Technology is the place for you. Nationwide's industry-leading technology workforce embraces an agile work environment and a collaborative culture to deliver outstanding solutions and results. If that sounds like something you aspire to, we want to hear from you! As a Cyber Technology Risk Professional, you'll be entrusted to protect Nationwide. You'll identify issues and develop solutions for cyber security problems. You'll assess, report, and manage cyber risk through constant interaction with our technology and business partners. You'll gain an understanding of leading-edge technologies that play a key part in keeping Nationwide safe in our increasingly threatening world. You'll also help to build long-term relationships with potential Nationwide partners by providing up-to-date information on our Information Security Practices and thereby differentiating ourselves from our competitors by ensuring Nationwide is resilient in an ever-changing world and can meet, and exceed, its regulatory obligations while protecting our customers and business partners.

Requirements

Must have strong foundational understanding of Technology Audit concepts, knowledge of controls, mitigation strategies, and risk management
Three years of experience in one or more information risk management capabilities and/or information audit systems.
Three years of experience in Technology.

Nice To Haves

MS Office Suite, Sharepoint, SQL, Powershell, Power Apps + BI, Python, GitHub, Archer, Glean, CoPilot
Familiarity with Model Audit Rule (MAR), Sarbanes-Oxley (SOX), Payment Card Industry (PCI), Personal Identifiable Information (PII), HIPAA COSO, COBIT, NIST, and ISO 27001 frameworks
Undergraduate studies in cyber security, management information systems, engineering, math, computer science, data analytics or comparable experience and education strongly preferred.
Graduate studies in cyber security, computer science or a related field are a plus.
Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Business Continuity Professional (CBCP) or another cyber certification preferred.
Insurance and/or financial services industry knowledge a plus.
Other criteria, including leadership skills, competencies and experiences may take precedence.

Responsibilities

Test multiple technology infrastructure, operations, and security controls for multiple applications concurrently.
Apply critical thinking and analysis to independently execute control testing and documenting of results while adhering to professional and internal standards.
Identify and document deviations and exceptions within testing results, while assessing the risk criticality and impact.
Participate and lead aspects of innovation and automation initiatives for team uplift and efficiency of internal processes.
Effectively use strong communication skills for partnering with internal clients and business entities.
Demonstrates thought leadership to team by reviewing work performed by other team members and providing verbal and written feedback.
May perform other responsibilities as assigned.
Supports the improvement of the risk posture pertaining to confidentiality, availability, and integrity of assigned area by identifying, documenting, and communicating cyber risks.
Partners in the development and reporting of key risk metrics.
Responsible for applying secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats and vulnerabilities.
Integrates technology risk practices to reduce business risk.
Partners to understand the current risk posture of portfolio and security priorities.
Assists with communicating risk issue mitigation plans and ensuring risks are closed on time.
Works with external regulators to respond to inquiries properly and accurately.
Continuously matures compliance capabilities, providing expertise and execution against, the risk inherent in all compliance and regulatory matters.
Collaborates with customers to respond to Request for Proposal (RFP), Request for Information (RFI), and Diligence inquiries.
Completes simple to moderate risk assignments on time, achieving set milestones.
Performs and tracks consulting efforts to improve cyber posture.
Helps drive the adoption of IRM capability efforts within assigned area.
Enhances application and cloud security to counteract evolving cyber threats.
Serves as a conduit, driver and communicator between cyber capability and clients.
Performs straightforward to moderate Business Impact Analysis to identify enterprise-critical processes.
Collaborates with peers and partners to develop test plans and strategies, monitor exercises, and communicates the results.
May perform other responsibilities as assigned.

Benefits

medical/dental/vision
life insurance
short and long term disability coverage
paid time off with newly hired associates receiving a minimum of 18 days paid time off each full calendar year pro-rated quarterly based on hire date
nine paid holidays
8 hours of Lifetime paid time off
8 hours of Unity Day paid time off
401(k) with company match
company-paid pension plan
business casual attire