Descrizione
ECMC Group is a nonprofit corporation focused on helping students succeed. Headquartered in Minneapolis, ECMC Group and its family of companies provide financial tools and services, as well as funding for innovative programs to help students achieve their academic and professional goals. Job Summary: Serves as a senior member of the IT Risk and Compliance function, providing expertise and independent judgment to support the organization's risk management, regulatory compliance, and information security objectives.
Partners with stakeholders across the enterprise to evaluate risk, strengthen controls, and promote compliance with applicable standards and requirements. Acts as a trusted advisor within the organization, contributing to the effectiveness and continuous improvement of risk and compliance practices while serving as a resource to less experienced team members. Essential Duties and
Responsibilities
Leads and performs medium to high complexity IT risk and compliance reviews, including planning, risk analysis, evidence gathering, control testing, and reporting. Coordinates and supports FISMA readiness assessments, SOC reporting, external penetration testing, and internal and external audit activities. Plans and coordinates security awareness initiatives, including annual training, phishing simulations, security communications, and custom learning content.
Leads vendor security risk assessments and evaluates security and compliance requirements within vendor relationshi
Descrizione completa, azienda e link per candidarti: dopo l'accesso.
AccediI contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica.
Invia il tuo CV così i datori di lavoro possono contattarti direttamente.