Asset Risk Assessment Specialist

Role Requires

- Influence key stakeholders including risk practitioners, system owners, management, C-Level stakeholders to build consensus for the new asset assessment
- Manage vendor resources to deliver an objective risk assessment that is suitable for the environment.
- Work with system owners to conduct asset assessments of new assets to identify and remediate risks before assets are deployed to the production environment
- Perform quality assurance reviews on the asset assessments produced by the managed service provider and other team members
- Conduct analysis of assessment results to identify recurring risk themes
- Develop and maintain working relationships with development groups, risk officers and technology control owners
- Lead workshops to educate system owners and developers to share information about the new asset certification program.
- Work with relevant subject matter experts to maintain consistency and accuracy of various technology controls as implemented within the Asset Assessment.
- Ensure any identified risks are properly prioritized and addressed through the Firm's risk reporting process
- Deliver management dashboards containing key risk indicators, including but not limited to:
- Managing an inventory of existing resources that contribute to reports & data.
- Delivering consolidated metrics which are repeatable, consistent and transparent.
- Developing an analytical approach to trend analysis with a focus on identifying opportunities to improve data quality transparency and reporting.

Skills Required


- Knowledge of Technology applications and infrastructure (eg. Server, network, platform desktop environment) and how they are used in large organisations.
- Solid understanding of technology & data and information security risks
- Experience performing risk and control assessments at large, financial services institutions (eg - risk assessment, internal/external audit)
- Strong data analysis skills with proven track record in data manipulation/data mining.
- Motivated self-starter, with the ability to be pro-active and work well as part of a team.
- Dynamic individual with the ability to switch context quickly and work on multiple streams of work concurrently.
- Excellent oral, verbal communication, interpersonal and presentation skills required
- Ability to build and sustain relationships with individuals at all levels of the organisation and leverage this to achieve work-related objectives.

Skills Desired


- One or more industry certifications (eg, CISSP, CISM, CISA, CRISC, CCNA)
- Financial Services industry experience
- Experience with Networking, VOIP, Storage, Hardware and Operating Systems
- Familiarity with ISO 27001, COBIT, ITIL, Banking regulations (eg, FFIECGuidebooks)

McGregor Boyall is an equal opportunity employer and do not discriminate based on race, religion, gender, age, sexuality, gender identification, or physical ability.