Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range

$110,600.00 - $182,400.00

1

Under general supervision, this position is responsible for identifying, assessing and establishing mitigation strategies within a business and across the enterprise. Partnering and maintaining strong working relationship with key constituents (i.e.; IT risk management, security, business continuity, enterprise risk management, corporate audit, compliance, business continuity, and information systems security) while driving solutions to reduce risk. This position works with the IT Risk Management core team to develop and maintain metrics, track and monitor ITRM and Corporate Audit Risk issues, execute the ITRM methodology including IT Risk Management profiling and analysis. This job may lead others

What Will You Do?

• Risk Analysis and Risk Assessments:
  • Identify and lead the appropriate subject matter experts to participate in the identification and analysis of risk scenarios.
  • Direct the completion of risk analysis sessions and risk assessment activity within the Lines of Business (LOB).
• Risk Treatment:
  • Support the accountable parties in determining the appropriate treatment of identified risks.
  • Identify appropriate action plans for risk remediation.
  • Communicate and set direction for the acceptance of risk that is aligned with Travelers risk appetite.
• Control Creation, Optimization and Monitoring:
  • Inventory, assess significance, assign accountability, and develop appropriate monitoring for the LOB control environment.
  • IT Process, Risk and Control (PRC) Framework:
  • Partner with assigned LOB risk managers to ensure alignment and support the LOB in understanding and applying the IT Process, Risk and Control (PRC) framework.
  • Align IT Risk Management (ITRM) activity with the IT PRC framework.
  • Gain an understanding of how the LOB controls map to the IT PRC framework and gaps in risk and control coverage.
• Metrics & Reporting:
  • Direct the LOB to identifying and obtaining the data required for consolidated metrics and reporting.
  • Prepare LOB specific reporting dashboards and metrics that are external to the risk management tool.
• Technology Enablement:
  • Train the LOB end users to understand the risk management tool and how to leverage its capabilities.
  • Identify additional LOB ITRM processes or specific requirements that can be operationalized through the risk management tool.
  • Use the risk management tool to support the ITRM activity completed by the LOB.
• IT Risk Management Training:
  • Support the education and awareness of LOB personnel across ITRM principles, concepts and methodologies.
  • Attend required ITRM training sessions.
• Governance, Policies and Procedures:
  • Facilitate the communication, education and awareness of key IT Risk Management initiatives and coordinate feedback to be provided back to IT Risk Management.
  • Responsible for compliance with audit planning and tracking, business continuity and records retention.
  • Responsible for compliance with the LOB in understanding and applying policies, standards and procedures across the IT environment.
• Responsible for compliance with the LOB in understanding the ITRM taxonomy and ITRM processes.
• Involvement in the IT Risk Management council.

What Will Our Ideal Candidate Have?

• 
  
• Six years of experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity preferred.
•  B.S. in IT related discipline or similar degree preferable
• General knowledge and work experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity
• Certified in Risk and Information Systems Control (CRISC) designation preferred
• Experience leading technical teams preferred.
• Technical Knowledge - Advanced:
  • Able to understand detailed issues around business continuity, security, and overall risk in IT.
  • Able to have enough expertise to drive a solution and solve issues, addressing risk.
• Business Knowledge & Partnership - Advanced:
  • Creates an atmosphere where business partner's issues are dealt with professionally, and in a timely manner.
  • Suggests solutions that make sense and improve the performance of the assigned systems.
  • Ensures customer's perspective is understood to optimize system(s) support of the business goals.
  • Communicates openly and effectively in a manner consistent with the audience.
  • Ensures that reports are precise, timely and accurate.
• Problem Solving & Decision Making - Advanced:
  • Demonstrates sound analytical and diagnostic skills dealing with issues that are loosely defined and/or where information is available but must be further manipulated.
  • Once decisions are made, is able to follow the management plan and direct activities to obtain intended results.
  • Takes input from several sources, decides if all the information needed is available and moves to a decision.
  • Openly and directly confronts conflict until resolved.
• Team Orientation - Advanced:
  • Maintains effective partnerships across the organization and is able to influence senior management, peers and subordinates through an inclusive style and recognition of their abilities and knowledge.
  • Balances team and individual responsibilities.
  • Exhibits objectivity and openness to others' views.
  • Gives and welcomes feedback.
  • Puts success of team above own interest.
• Leadership - Intermediate:
  • Supports a distinct business unit or several smaller functions.
  • Responsibilities are assigned with some latitude for setting priorities and decision-making using established policies and procedures.
  • Results are reviewed with next level manager for clarification and direction before proceeding.
• Planning and Project Management - Advanced:
  • Identifies those unit tasks that are most important and maintains a clear sense of priorities and the larger picture.
  • Anticipates and effectively responds to changes in workload and resources.
  • Is able to influence management, peers and subordinates through an inclusive style and recognition of their abilities and knowledge.
• Communications - Advanced:
  • Strong communications skills are preferred to work across the organization, and several corporate functions.
• Financial Awareness - Intermediate:
  • Has the ability to frame risk issues in a risk business case / term, to help priorities projects and value.

• What is a Must Have?

• Three years of Technology experience required.
• One year of IT Risk Management experience required.