American Tower - Westborough, MA

posted 5 months ago

Full-time - Manager
Remote - Westborough, MA
Heavy and Civil Engineering Construction

About the position

The Manager of Controls and Risk Management will play a pivotal role in American Tower's Information Security organization. This position is responsible for supporting the control framework on a global scale, ensuring compliance with standards such as ISO 27001/27002, Sarbanes-Oxley, and Payment Card Industry regulations. The individual in this role will coordinate various controls and risk management initiatives, focusing on security, compliance, and risk assessments. A key aspect of the job will involve assisting in the deployment of various controls and fostering relationships across the organization to ensure adherence to global standards. In this role, you will be tasked with facilitating and coordinating ongoing internal and external reviews and audits, working closely with identified business owners to ensure that appropriate actions are taken based on the findings from these reviews. You will also conduct and monitor third-party system certifications and perform security and privacy impact assessments for both existing and new initiatives within the company. Additionally, you will assist in developing global training and awareness initiatives to enhance the overall security posture of the organization. The Manager of Controls and Risk Management will also be responsible for performing control and vulnerability assessments to identify weaknesses, assess the effectiveness of existing controls, and recommend necessary enhancements. Developing and implementing a global controls methodology and framework will be a critical part of your responsibilities, along with other duties as assigned. This position offers the opportunity to make a significant impact on the company's information security and risk management efforts.

Responsibilities

  • Facilitate and coordinate ongoing internal and external reviews and audits with identified business owners and ensure appropriate action is taken based on the information gathered during those reviews.
  • Conduct and monitor third-party system certifications and conduct security and privacy impact assessments for existing and new initiatives across the Company.
  • Assist with developing global training and awareness initiatives.
  • Perform control and vulnerability assessments to identify control weaknesses, assess the effectiveness of existing controls, and recommend enhancements.
  • Develop and implement a global controls methodology and framework.
  • Other duties as assigned.

Requirements

  • Proven experience in information security, risk management, or a related field.
  • Strong understanding of compliance frameworks such as ISO 27001/27002, Sarbanes-Oxley, and Payment Card Industry standards.
  • Experience in conducting audits and assessments, both internal and external.
  • Ability to develop and implement training and awareness programs.
  • Excellent communication and interpersonal skills to work cross-functionally.

Nice-to-haves

  • Certifications such as CISSP, CISM, or CISA are preferred.
  • Experience with third-party risk management and assessments.
  • Familiarity with security and privacy impact assessments.

Benefits

  • Work from home option available.
  • Comprehensive health insurance coverage.
  • 401(k) retirement savings plan with company matching contributions.
  • Paid time off and holidays.
  • Professional development opportunities.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service