Overview
Lead the Infrastructure Access Management Oversight team within the Infrastructure Risk and Control function, supporting regional and global management across identity and access management platforms, processes and controls. The role also oversees vulnerability (VUL) management across production and non-production technology environments.
What you'll do
- Establish and manage an effective risk-minded Infrastructure Access and VUL oversight function within Technology Infrastructure.
- Execute daily activities supporting the design and operating effectiveness of controls in Infrastructure Services and identity and access management platforms, processes and controls.
- Interface with Identity and Access Management Platforms and support all areas within the Infrastructure group regarding Infrastructure Access.
- Participate in activities supporting regional and global management responsible for the VUL management process across platforms and technology implemented into production and non-production environments.
- Track open VUL, identify priority based on the CVSS score, convey fix priorities and track remediation according to the identified priority.
- Connect Infrastructure Access and VUL activities across the organization to identify trends.
- Provide strategic thinking, thought leadership and guidance on key risks and improvement opportunities, and drive remediation efforts across Technology Infrastructure.
- Support audit and other remediation efforts, including developing and implementing supporting programs such as training, monitoring and reporting.
- Work with global process owners to proactively manage and execute control governance to reduce the opportunity for losses, errors, threats and risks.
- Establish working relationships and communications with key Infrastructure Access and VUL stakeholders globally and support a point of view.
- Ensure meetings are effective and deliverables are accurate, complete and provided to stakeholders on time.
- Lead, coach and develop team members by setting clear expectations, providing regular guidance and supporting individual growth and performance objectives.
- Manage team priorities, workload and delivery timelines to ensure high-quality execution and timely completion of risk and control deliverables.
- Foster accountability, collaboration, continuous improvement and risk ownership across the team while encouraging knowledge sharing and operational excellence.
What you'll need
- 12-15+ years of total experience.
- 10+ years of relevant Risk and Controls experience.
- 4+ years of experience in Financial Services.
- In-depth understanding of Infrastructure Risk and Control.
- Excellent understanding of tools and processes supporting Identity and Access Management.
- Ability to drive and/or oversee organizations' Infrastructure Access initiatives.
- Good understanding of Infrastructure Access tools such as CyberArk.
- Good understanding of VUL management processes and tools such as Qualys.
- Understanding of Identity and Access Management platforms including ARCOS, CyberArk, ACF2, RACF, Role Based Access Control, Attribute Based Access Control, integration of identity systems with Access Management Platforms, Service Accounts, Technical Accounts, Shared Accounts and AD-based authentication.
- Good understanding of financial services regulations, risks and controls.
- Strong leadership capabilities, including effective decision-making, team mentoring and delivering results.
- Ability to develop long-term strategies and align them with organizational goals.
- Ability to influence and inspire others toward achieving shared goals.
- Ability to analyze complex situations and make informed decisions.
- Excellent verbal and written communication skills and ability to articulate vision and direction clearly to various stakeholders.
- Ability to make critical decisions under pressure by balancing risk and opportunity while considering long-term impact.
- Ability to inspire, motivate and build cohesive teams with strong collaborative skills to foster partnerships with other teams and stakeholders.
- Skills in negotiation and handling difficult conversations.
- Highly motivated, self-starter who deals well with ambiguity and can execute effectively.
- Ability to challenge and influence stakeholders with differing viewpoints to reach consensus.
Nice to have
- Internal Audit or Risk-related certification such as CISA, CIA or CRISC.
- Infrastructure Access-related certification such as CInfrastructure Access.
- Infrastructure Access-related engineering experience.
- Experience working at Big4.
Details
Read the full description and apply on the company’s own careers page.