IT Risk & Security Manager

Full-time - Mid Level

Hybrid - Hartford, CT

Insurance Carriers and Related Activities

About the position

Under general supervision, this position is responsible for identifying, assessing and establishing mitigation strategies within a business and across the enterprise. Partnering and maintaining strong working relationship with key constituents (i.e.; IT risk management, security, business continuity, enterprise risk management, corporate audit, compliance, business continuity, and information systems security) while driving solutions to reduce risk. This position works with the IT Risk Management core team to develop and maintain metrics, track and monitor ITRM and Corporate Audit Risk issues, execute the ITRM methodology including IT Risk Management profiling and analysis. This job may lead others.

Responsibilities

• Identify and lead the appropriate subject matter experts to participate in the identification and analysis of risk scenarios.
• Direct the completion of risk analysis sessions and risk assessment activity within the Lines of Business (LOB).
• Support the accountable parties in determining the appropriate treatment of identified risks.
• Identify appropriate action plans for risk remediation.
• Communicate and set direction for the acceptance of risk that is aligned with Travelers risk appetite.
• Inventory, assess significance, assign accountability, and develop appropriate monitoring for the LOB control environment.
• Partner with assigned LOB risk managers to ensure alignment and support the LOB in understanding and applying the IT Process, Risk and Control (PRC) framework.
• Gain an understanding of how the LOB controls map to the IT PRC framework and gaps in risk and control coverage.
• Direct the LOB to identifying and obtaining the data required for consolidated metrics and reporting.
• Prepare LOB specific reporting dashboards and metrics that are external to the risk management tool.
• Train the LOB end users to understand the risk management tool and how to leverage its capabilities.
• Identify additional LOB ITRM processes or specific requirements that can be operationalized through the risk management tool.
• Support the education and awareness of LOB personnel across ITRM principles, concepts and methodologies.
• Facilitate the communication, education and awareness of key IT Risk Management initiatives and coordinate feedback to be provided back to IT Risk Management.
• Responsible for compliance with audit planning and tracking, business continuity and records retention.
• Responsible for compliance with the LOB in understanding and applying policies, standards and procedures across the IT environment.
• Responsible for compliance with the LOB in understanding the ITRM taxonomy and ITRM processes.
• Involvement in the IT Risk Management council.
• Will be called upon to provide innovative risk management solutions.
• Perform other duties as assigned.

Requirements

• Six years of experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity preferred.
• Bachelors degree in Technology or a related field preferred.
• Experience leading technical teams preferred.
• Three years of Technology experience required.
• One year of IT Risk Management experience required.

Nice-to-haves

• Technical Knowledge - Advanced: Able to understand detailed issues around business continuity, security, and overall risk in IT.
• Business Knowledge & Partnership - Advanced: Creates an atmosphere where business partner's issues are dealt with professionally, and in a timely manner.
• Problem Solving & Decision Making - Advanced: Demonstrates sound analytical and diagnostic skills dealing with issues that are loosely defined.
• Team Orientation - Advanced: Maintains effective partnerships across the organization and is able to influence senior management, peers and subordinates.
• Leadership - Intermediate: Supports a distinct business unit or several smaller functions.
• Planning and Project Management - Advanced: Identifies those unit tasks that are most important and maintains a clear sense of priorities.
• Communications - Advanced: Strong communications skills are required to work across the organization.
• Financial Awareness - Intermediate: Has the ability to frame risk issues in a risk business case / terms.
• Human Resource Management - Basic: Demonstrates good interpersonal skills by displaying an understanding of the needs and perspective of others.

Benefits

• Health Insurance: Employees and their eligible family members - including spouses, domestic partners, and children - are eligible for coverage from the first day of employment.
• Retirement: Travelers matches your 401(k) contributions dollar-for-dollar up to your first 5% of eligible pay, subject to an annual maximum.
• Paid Time Off: Start your career at Travelers with a minimum of 20 days Paid Time Off annually, plus nine paid company Holidays.
• Wellness Program: The Travelers wellness program is comprised of tools, discounts and resources that empower you to achieve your wellness goals.
• Volunteer Encouragement: We have a deep commitment to the communities we serve and encourage our employees to get involved.