Responsibilities

• Spearhead initiatives to identify, investigate, communicate, resolve, and improve information security governance, risk and compliance in IT investments.
• Partner with Technology, Enterprise Risk Management, Internal Audit, PCI Compliance, Vendor Management and other stakeholders to assess cybersecurity risks, including third‑party risk, and help teams determine mitigation strategies.
• Champion risk assessment of technologies and processes, including digital crown jewels and compliance‑impacting technologies and processes.
• Connect the dots to improve and enhance risk assessment processes.
• Understand and collaborate with stakeholders for prioritizing and mitigating vulnerabilities identified through vulnerability assessment, penetration testing, application security testing and other risk assessment activities.
• Follow up on vulnerabilities, configuration and cloud gaps and track remediation.
• Mature ...