IT Governance, Risk, and Compliance Specialist III

About the position

As an IT Governance, Risk, and Compliance Specialist III at Northwestern Mutual, you will leverage your expertise to conduct risk assessments, develop risk management strategies, and provide advisory services on risk mitigation measures. This role involves collaborating with cross-functional teams to integrate risk management practices into operations while staying updated with industry regulations and best practices. You will also be responsible for educating the business on risk management principles through workshops and training sessions.

Responsibilities

• Conduct risk assessments to identify potential risks and vulnerabilities in operations and processes.
• Develop risk management strategies and frameworks to address specific needs.
• Provide advisory on risk mitigation measures, controls, and best practices.
• Identify emerging risks and trends in the industry and provide proactive recommendations to the business.
• Conduct risk workshops and training sessions to educate the business on risk management principles and practices.
• Analyze and interpret information related to risks, incidents, and losses to identify patterns and trends.
• Collaborate with cross-functional teams to integrate risk management practices into operations.
• Support the risk assessment function in conducting assessments and reporting on assessment outcomes.
• Collaborate with business partners to develop and manage risk responses.
• Assess the impact of proposed risk responses on the overall risk posture.
• Provide guidance throughout the risk acceptance process and lifecycle.
• Assist with the development of key risk indicators.
• Monitor the risk environment and analyze key risk trends.
• Create comprehensive risk reports tailored for various stakeholder groups.
• Assist with the design and implementation of risk dashboards.
• Communicate risk themes with risk partners across the organization.

Requirements

• Bachelor's degree with an emphasis in MIS, Business or related field; or related work experience beyond the minimum required.
• 4-6 years of experience in risk management consulting or a similar role, with a focus on providing strategic risk management solutions.
• Strong knowledge of risk management principles, methodologies, and frameworks.
• Experience in conducting risk assessments, audits, and developing risk mitigation strategies.
• Familiarity with industry regulations and standards such as NIST, HIPAA, ISO 27001, or similar.
• Excellent analytical and problem-solving skills, with the ability to analyze complex risks and recommend effective solutions.
• Strong communication and interpersonal skills, with the ability to build relationships and effectively communicate with clients at all levels of the organization.
• Relevant certifications such as CRISC, CISM, CISA, or similar certifications are highly desirable.

Benefits

• Flexible schedule
• Comprehensive benefits
• Concierge service
• Employee resource groups