Information Security Risk Manager
New
T
TheHiveCareersInformation security
Jamaica/Fully RemoteContractManager
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
Requirements
- Provide information security and technology risk management consulting to project teams.
- Review and interpret requirements documentation, architecture diagrams, and solution designs.
- Assess security risks across applications, infrastructure, business units, business processes, and external suppliers.
- Interpret penetration-test results for internet-facing applications.
- Coordinate code scans for new or modified code deployments.
- Track issues arising from TRA, ISA, penetration tests, CIRA, code scans, and PIRT.
- Collaborate with technology and business owners and internal and third-party teams.
Responsibilities
- Review requirements documentation, architecture diagrams, and solution designs to assess project feasibility and security risk.
- Assess applications, infrastructure, business units, business processes, and external suppliers for information security risks.
- Recommend measures to address business needs and identified risks.
- Review penetration-test results for internet-facing applications with third-party teams and internal development groups.
- Coordinate completion of code scans for new or modified code deployments.
- Track issues identified through TRA, ISA, penetration tests, CIRA, code scans, and PIRT through to completion.
- Log deficiencies when issues cannot be mitigated before implementation and the associated risk is within the bank’s risk appetite.
- Provide information security risk consulting to help embed policies, standards, and processes in project solutions.
- Develop a risk-based schedule for BAU baseline risk assessments in consultation with the senior manager.
- Review contracts and third-party arrangements for adherence to information security policies and protection of information assets.
View Full Description & ApplyYou'll be redirected to the employer's site
