Information Protection Senior Advisor - Remote

Information Protection Senior Advisor Location: Open to remote candidates, preference is for candidates local to one of the major client hubs: Denver, CO, St louis, MO, Bloomfield, CT, New York, NY. Schedule preference is EST, but willing to discuss with the candidate.

Duties:
This position includes fiduciary duty or access to financial systems
The Business Information Security Officer (BISO) performs a First Line of Defense role within firm's Information Protection organization, providing oversight of all Policies & Standards within the assigned business unit. This position will report directly to the Group Information Security Officer (Information Protection Director) within Information Protection organization but will also matrix into the Portfolio & Operations (Technology Shared Services) organization.

The BISO is the primary interface between IP group and the assigned business unit and is focused on improving operational efficiency, driving accountability and ownership, and reducing risk to an acceptable level by:
Enhancing visibility for key risk areas to maximize risk reduction
Consulting on key security process governance based on risk appetite
Supporting deeper integration of Information Protection Shared Services
Driving security value around local and global initiatives

Skills:
Primary Focus Areas:
Application Vulnerability Assessment
Audit Interface
Continuity of Business
Data Transfer Authorization
Data Leakage Prevention
Desktop Controls
Electronic Transportable Media
End User Computing
Identity & Access Management
Information Security Risk Assessment
Issues Management
Key Risk Indicators
Legal / Regulatory Requirements
Policy & Procedures
Phishing
Risk Control Self-Assessment
Secure Software Development Lifecycle
Security Incident Response Team
Training & Awareness
Third Party Information Security Assessment
 

Education and Qualifications: 10 years of professional experience in the areas of Information Security, Technology Risk, Operational Risk, and Data Protection. Industry certifications such as CISA, CISSP, CISM, CRISC, CDPSE, CGEIT. Familiarity and experience with Legal / Regulatory frameworks such as FIO, GDPR, HIPAA, HITRUST, and SOX. Familiarity and experience with Industry frameworks such as COBIT, ISO, NIST, PCI, SCF, SOC1, and SOC2. A strong communicator with great analytical / presentation skills. An emotionally intelligent individual with the ability to build productive partnerships between technology, business leaders, and external partners. Agility in dealing with a fast paced, constantly changing business environment and areas of ambiguity. Strong work ethic and a high drive and focus. Demonstrates optimism and determination when facing challenges. A bachelor's degree, a minimum of one industry certification (CISA, CISSP, CISM, CRISC, CDPSE, CGEIT), and experience in a regulated industry is required.  Experience in a Health Services related industry is preferred.

Certifications & Licenses:

CISA CISM CISSP