technology risk AssociateDTCC

Job Description:
Position Title: Sr. Technology Risk Associate
Job Summary/Basic Function:
Technology Risk Management Security Program Governance ensures DTCC is complying with best practices as defined in NIST Cyber Security Framework. Additional staffing is required to assist with controls testing and assessments of cyber technology areas. The ideal candidate has done related work for at least five years and has a thorough knowledge of technology controls (IT and cyber) and how they are executed in today's IT threat landscape. The incumbent should have a strong understanding of cyber security methodologies, frameworks, and regulations in the financial services sector.
Principal Responsibilities:
Understand cyber and IT best practices including knowledge of frameworks, guidelines, and regulations (i.e., NIST Cybersecurity Framework, FFIEC, NYSDFS)
Manage performance tests of effectiveness over controls, as prescribed by internal procedures, and documenting the results of the testing.
Coordinate and complete control testing which includes, obtaining populations and validating the completeness and accuracy, making sample selections based on sampling methodology, and performing appropriate testing steps to confirm the control is operating effectiveness and design
Complete testing based on scheduled dates.
Identify gaps across tested controls
Communicate deficiencies, reviewing responses for validity and track remediation effort
Ensure targeted area being assessed meets all industry regulations, standards, and compliance requirements
Experience
Experience working in cross-departmental teams and leading efforts through collaboration and influence is required.
Familiar with ISO/IEC 27001/27002:2013, NIST Cybersecurity Framework, NIST Special Publication (SP) 800-53 or other cyber, technology, financial services guidelines, frameworks and regulations is required.
Expert writing skills to support thorough documentation of tested controls and communication of information security principles at all levels from executives to non-technical employees.
Intermediate level experience with Microsoft Excel. Has ability to create metrics
Understand the concepts of information technology risk and the different elements required that mitigate risk.
Ability to work efficiently and independently with minimal supervision (i.e., self-motivated, proactive, and willing to stretch to meet important deadlines).
Experience establishing and maintaining effective relationships with internal customers
Knowledge and Skills Required:
- Demonstrated flexibility, cooperation, collegiality and teamwork abilities
- Excellent communication, writing and interpersonal skills
- Extremely strong attention to detail
- Multi-tasking and follow-up skills
- Confidence and presence when working with senior management
- Proven knowledge of technical infrastructure, networks, databases and systems and how they affect an organization's cybersecurity risk
Proven knowledge of security methodologies, policies, standards and best practices
Strong technology background, including concepts such as application development, change management, and enterprise infrastructure
Ability to explain and articulate technical concepts using both technical and non-technical language
Multi-tasking and follow-up skills
Proficient in PowerPoint, Excel and Word
Experience with Microsoft Visio (preferred)
Education, Training &/or Certification:
College degree in Business Management / Computer Science
CISA, CISM, CISSP, CRISC or equivalent certification
Physical Requirements:
Ability to lift and carry files and materials.
Position requires adequate vision, hearing and manual dexterity to interact with people in person, on the phone, via teleconferencing and in writing.
Job takes place in normal environmental conditions.
About Us: About DTCC
DTCC safeguards the financial markets and helps them run efficiently, in times of prosperity and crisis. We are uniquely positioned at the center of global trading activity, processing over 100 million financial transactions every day, pioneering industry-wide, post-trade solutions and maintaining multiple data and operating centers worldwide. From where we stand, we can anticipate the industry's needs and we're working to continually improve the world's most resilient, secure and efficient market infrastructure. Our employees are driven to deliver innovative technologies that improve efficiency, lower cost and bring stability and certainty to the post-trade lifecycle.
DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you'll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It's the chance to make a difference at a company that's truly one of a kind.
About the Team: Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.
The Technology Risk Management department is responsible for setting strategic direction in the areas of IT Risk and Information Security. They are accountable for maintaining DTCC's corporate security policies and control standards and acting as an operational arm for monitoring threat intelligence.
DTCC

Manila City, Metro Manila
Permanent
Full-time