Specialist, IT and Cyber Risk Assessment

Lincoln Financial•Radnor, PA

1d•$55,700 - $100,200•Remote

About The Position

As an IT & Cyber Risk Assessment Specialist, you will apply functional knowledge related to identifying, assessing, reporting, and mitigating IT and Cyber risk for the enterprise. You will proactively collaborate with business and technology leadership and other stakeholders to develop, recommend, and implement mitigation solutions. You will support the development of measures to monitor the effectiveness and progress of risk mitigation approaches.

Requirements

4 Year/Bachelor's degree (or equivalent).
1 - 3+ Years of Information Security experience that directly aligns with the specific responsibilities for this position.
Ability to read, analyze and interpret both internal and external documents such as general media/publications, professional journals, technical procedures, governmental regulations, policies, proposals, and standard operating procedures.
Strong written and verbal communication skills.
Demonstrates excellent organizational skills with the ability to prioritize workload and multi-task while maintaining strict attention to detail.
Demonstrates solid project management skills including, critical ability to coordinate and balance multiple projects in a time-sensitive environment, under pressure, and meeting deadlines.
Demonstrates strong interpersonal skills with a collaborative style.
Demonstrates the ability to use sound judgment and discretion regarding confidential information.
Finds common ground and can gain collaboration among management, colleagues and peers; can influence outcomes without directing or commanding.
Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).
Successfully completes regulatory and job training requirements.

Nice To Haves

Agile Mindset; awareness/understanding of Agile methodologies

Responsibilities

Maintains knowledge of current and emerging information security trends, threats, technologies, regulatory requirements, industry best practices, and AI-related risks applicable to assigned areas of responsibility.
Supports departmental and enterprise initiatives by contributing to change management efforts, team objectives, and continuous improvement activities.
Performs information security risk management activities and delivers on assigned projects while building expertise within assigned areas of responsibility.
Identifies opportunities for process improvements that enhance efficiency, consistency, and quality and communicates recommendations to management.
Conducts information security risk assessments of third-party vendors by reviewing security questionnaires, audit reports, control documentation, and other supporting evidence.
Evaluates assessment results and assists in determining third-party information security risk profiles using established methodologies, company policies, and industry standards.
Develops recommendations to address identified security gaps and collaborates with internal stakeholders and external parties to support risk mitigation and remediation efforts.
Documents assessment activities, findings, recommendations, and communications within approved governance, risk, and compliance platforms.
Responds to requests regarding the organization's information security practices by providing accurate, approved, and professionally written information.
Partners with business stakeholders, risk functions, and other teams across the enterprise to support risk assessment activities, remediation tracking, and risk management efforts.
Collects, maintains, and analyzes assessment and risk management data to support program oversight, reporting, and decision-making.
Assists in the preparation of metrics, dashboards, reports, and presentations that communicate assessment results, risk trends, remediation progress, and program performance to stakeholders and leadership.
Identifies trends, reporting opportunities, and data quality improvements to support continuous improvement efforts and informed decision-making.
Applies critical thinking to analyze and synthesize information from multiple sources, including security questionnaires, audit reports, assessment evidence, policies, standards, and stakeholder discussions, to develop clear findings, recommendations, and reporting.
Communicates effectively through both written and verbal channels, tailoring messages, reports, and presentations to technical, business, and leadership audiences.
Assists in the development, maintenance, and implementation of information security standards, policies, procedures, and related documentation.
Evaluates security considerations associated with third-party AI solutions and provides input based on established policies, standards, and industry best practices.
Demonstrates curiosity and a willingness to learn emerging technologies, including AI, and explores opportunities to improve team processes, reporting, and analysis capabilities.