Governance and Risk Analyst III
for section headings. Use - for any list of duties/requirements/benefits, and
for prose.
We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: EEO, equal-opportunity, scam-warning, cookie/navigation/legal, duplicated lines, application instructions. Also remove "Please contact the recruiter..." etc. Also remove "Credit One Bank does not accept unsolicited resumes..." etc.
We need to keep the substantive content: Position Summary paragraph, Responsibilities list (essential job functions), Position Requirements (maybe as Requirements), Preferred (maybe as Qualifications or Skills). Also maybe include "About the role" heading for Position Summary. The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map:
- About the role: Position Summary paragraph.
- Responsibilities: Essential Job Functions list.
- Requirements: Position Requirements (mandatory).
- Qualifications: Preferred? Or maybe Qualifications separate from Requirements? The posting has "Position Requirements" and then "Preferred". Could treat "Position Requirements" as Requirements, and "Preferred" as Qualifications (or Skills). But we also have Skills maybe separate. However we can combine Preferred into Qualifications. The instruction: prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Requirements, Qualifications (covering Preferred). No Skills separate unless we have explicit skills list. There's mention of skills like "Excellent interpersonal, communication, and presentation skills, including formal report writing experience." That's part of Requirements. So we can keep within Requirements.
We must not repeat job title as heading. No Job ID.
We need to preserve all substantive information: need to include details like frameworks, years, etc.
We need to format lists: each bullet as
- . For prose, use
.
We need to ensure we don't include filler like "commensurate with experience". Not present.
We need to remove duplicated lines: there is duplication of "Two to fiveThree to seven years participating..." appears twice. We need to preserve but maybe it's a mistake; we should keep as is? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep the duplicated lines as they appear? Might be considered boilerplate? It's duplicated content within the posting; but it's substantive (years). However it's duplicated erroneously. Should we keep both? Probably keep as is, but could be considered duplication that we should remove? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." It says remove duplicated lines. So we should remove duplicated lines. So we need to detect duplicate lines and keep only one occurrence. The duplicated line: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." and later "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." Actually those are slightly different: one is projects, the other is audits and examinations. Wait the text: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." and later "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." They are not identical; one is projects, other is audits and examinations. So not duplicate. There's also "Two to fiveThree to seven years participating in information technology, software development, or information security projects." appears twice? Let's scan: In Position Requirements: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." Then later: "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." So not duplicate. There's also "Two to fiveThree to seven years participating in information technology, software development, or information security projects." appears only once. So fine.
We need to remove EEO etc: the paragraph about equal opportunity employer, reasonable accommodations, at-will employment, contact recruiter, unsolicited resumes. Remove those.
Also remove "Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas..." maybe that's substantive about company; could be considered part of About the role? Might be considered boilerplate? It's describing the company, not the role. The instruction: preserve ALL substantive information; but we might consider that as company overview, not required for the job posting? It's not about the role. However it's substantive info about the employer. The instruction didn't say to remove company description. It said remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we keep company description.
But we need to decide where to put it. Could be part of About the role? Or maybe a separate section like "About the company". Not in allowed headings. Since we only allowed headings list, we could incorporate it into About the role paragraph (Position Summary) or maybe as a separate
before sections. The instruction: Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have About the role heading and then include both Position Summary and company description as prose under it.
Thus About the role section will contain two paragraphs: Position Summary and company description.
Now Responsibilities: list of essential job functions. Need to extract each sentence separated by periods? The text is a long paragraph with many sentences. We need to turn into list items. We should preserve all substantive information; we can split by sentences that start with a verb. Let's parse:
"Recommend programmatic and technical directions and operate with a high degree of independence in matters relating to information security program governance, risk assessments, compliance activities, and decisions regarding risk, metrics, and program improvements.Operate with a high degree of independence with regard to project management activities, including the development of project plans.Perform other duties as assigned to ensure the smooth functioning of the department and maintain the reputation of the organization as a viable business partner.Contribute to the development and implementation of the [Information Technology/Software Development] risk management function of the technology risk program to ensure information security risks are identified, managed, and monitored.Internally assess, evaluate, and make recommendations to management regarding the adequacy of the (security and technical) risk controls for the Bank’s information and technology systems.Contribute to the system-wide information security governance and compliance program, ensuring Information Technology, Development & Information Security activities, processes, and procedures meet defined requirements, policies, and regulations.Develop and implement effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with regulatory expectations and relevant legislation.Execute strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors.Familiarity with Information Technology, Development, Information Security, and Industry compliance frameworks such as FFIEC, PCI DSS, NIST CSF, Center for Internet Security, Agile, etc.Communicates with all levels of staff including Information Technology, and Development, management and staff, developers and other technical staff, general counsel, auditors, and technology vendors and contractors.Work with Internal Audit, State and Federal regulators as appropriate on required technology & security assessments, audits, and examinations.Coordinate, track and execute on all information technology and information security related audits and examinations including scope of audits, timelines, auditing agencies and outcomes.Work with auditors and regulators as appropriate to keep audit focus in scope, maintain excellent relationships with audit and regulatory entities and provide a consistent perspective on the bank’s governance, risk, and compliance efforts.Provide guidance, evaluation, and advocacy on audit responses.Must be able to assess computer hardware, software, and systems for security risks (or violations) and work with Information Technology, Information Security, consultants, and bank vendors to recommend solutions.Develop strategies to address awareness and training for all stakeholders. Must be able to assess the status of complex multi-location projects as well as identify and implement appropriate corrective measures to resolve issues as they arise.Must have a strong customer service orientation and the ability to project that attitude to other teams.Collaborate with bank Business Continuity department on Technology & Information Security business continuity planning, disaster recovery planning, and testing."
We need to split into separate list items. Each sentence ends with a period. Some sentences have no space after period (like "...program improvements.Operate"). We'll split accordingly.
We'll produce - for each.
Now Requirements: Position Requirements paragraph includes multiple sentences. We'll turn into list? The instruction: Use
- for any list of duties/requirements/benefits. So we should list requirements as bullet points. So we need to extract each requirement sentence.
Position Requirements text:
"Bachelor’s degree in computer science, information technology, software development, or another related fieldA self-starter, able to work under general supervision. Comfortable working with inter-related infrastructure, software development, and information security risk and compliance issues.5+ years of information technology/development experience including information security technology skills and expertise.Knowledge of information technology and/or software development risk management frameworks and compliance practicesKnowledge of information technology, software development, and information security controlsAbility to develop security policies, standards, and guidelines based on best practices and industry frameworks.Two to fiveThree to seven years participating in information technology, software development, or information security projects.Excellent interpersonal, communication, and presentation skills, including formal report writing experience.Understanding of common security standards and regulations relating to a financial services environment such as FFIEC, PCI DSS, NIST CSA, Center for Internet Security (CIS), MITRE ATT@CK., ISO 27000, Agile, etc.Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations.Knowledge of financial service industry legal and regulatory requirements"
We need to split sentences. There are missing spaces after periods again. We'll split.
We'll produce list items.
Now Preferred: "Preferred" section includes bullet-like sentences:
"Familiarity with security auditing and the financial regulatory examination process (Federal Reserve Bank, Federal Deposit Insurance Corporation, Office of the Comptroller of the Currency, FFIEC, etc.)Information security governance, risk, and/or compliance experience in financial services or federal/state/local government including documenting risk and compliance activities.Experience participating in information technology, software development, or information security audits and/or risk assessments.Experience producing key metrics, information visualization, and reports."
We'll split into list items under Qualifications heading.
Now we need to ensure we don't include any boilerplate like "Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life." That's company description; we keep.
Now output HTML fragment: start with
About the role
then Position Summary paragraph
Company description paragraph
. Then Responsibilities
...
. Then Requirements
...
. Then Qualifications
...
. No Skills, Benefits, Pay, Schedule.
Make sure to not include extra whitespace? It's fine.
Now craft the paragraphs exactly as in source, preserving punctuation and content.
Position Summary: "The Information Security
for prose. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: EEO, equal-opportunity, scam-warning, cookie/navigation/legal, duplicated lines, application instructions. Also remove "Please contact the recruiter..." etc. Also remove "Credit One Bank does not accept unsolicited resumes..." etc. We need to keep the substantive content: Position Summary paragraph, Responsibilities list (essential job functions), Position Requirements (maybe as Requirements), Preferred (maybe as Qualifications or Skills). Also maybe include "About the role" heading for Position Summary. The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map: - About the role: Position Summary paragraph. - Responsibilities: Essential Job Functions list. - Requirements: Position Requirements (mandatory). - Qualifications: Preferred? Or maybe Qualifications separate from Requirements? The posting has "Position Requirements" and then "Preferred". Could treat "Position Requirements" as Requirements, and "Preferred" as Qualifications (or Skills). But we also have Skills maybe separate. However we can combine Preferred into Qualifications. The instruction: prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Requirements, Qualifications (covering Preferred). No Skills separate unless we have explicit skills list. There's mention of skills like "Excellent interpersonal, communication, and presentation skills, including formal report writing experience." That's part of Requirements. So we can keep within Requirements. We must not repeat job title as heading. No Job ID. We need to preserve all substantive information: need to include details like frameworks, years, etc. We need to format lists: each bullet as
. We need to ensure we don't include filler like "commensurate with experience". Not present. We need to remove duplicated lines: there is duplication of "Two to fiveThree to seven years participating..." appears twice. We need to preserve but maybe it's a mistake; we should keep as is? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep the duplicated lines as they appear? Might be considered boilerplate? It's duplicated content within the posting; but it's substantive (years). However it's duplicated erroneously. Should we keep both? Probably keep as is, but could be considered duplication that we should remove? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." It says remove duplicated lines. So we should remove duplicated lines. So we need to detect duplicate lines and keep only one occurrence. The duplicated line: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." and later "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." Actually those are slightly different: one is projects, the other is audits and examinations. Wait the text: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." and later "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." They are not identical; one is projects, other is audits and examinations. So not duplicate. There's also "Two to fiveThree to seven years participating in information technology, software development, or information security projects." appears twice? Let's scan: In Position Requirements: "Two to fiveThree to seven years participating in information technology, software development, or information security projects." Then later: "Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations." So not duplicate. There's also "Two to fiveThree to seven years participating in information technology, software development, or information security projects." appears only once. So fine. We need to remove EEO etc: the paragraph about equal opportunity employer, reasonable accommodations, at-will employment, contact recruiter, unsolicited resumes. Remove those. Also remove "Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas..." maybe that's substantive about company; could be considered part of About the role? Might be considered boilerplate? It's describing the company, not the role. The instruction: preserve ALL substantive information; but we might consider that as company overview, not required for the job posting? It's not about the role. However it's substantive info about the employer. The instruction didn't say to remove company description. It said remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we keep company description. But we need to decide where to put it. Could be part of About the role? Or maybe a separate section like "About the company". Not in allowed headings. Since we only allowed headings list, we could incorporate it into About the role paragraph (Position Summary) or maybe as a separate
before sections. The instruction: Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have About the role heading and then include both Position Summary and company description as prose under it.
Thus About the role section will contain two paragraphs: Position Summary and company description.
Now Responsibilities: list of essential job functions. Need to extract each sentence separated by periods? The text is a long paragraph with many sentences. We need to turn into list items. We should preserve all substantive information; we can split by sentences that start with a verb. Let's parse:
"Recommend programmatic and technical directions and operate with a high degree of independence in matters relating to information security program governance, risk assessments, compliance activities, and decisions regarding risk, metrics, and program improvements.Operate with a high degree of independence with regard to project management activities, including the development of project plans.Perform other duties as assigned to ensure the smooth functioning of the department and maintain the reputation of the organization as a viable business partner.Contribute to the development and implementation of the [Information Technology/Software Development] risk management function of the technology risk program to ensure information security risks are identified, managed, and monitored.Internally assess, evaluate, and make recommendations to management regarding the adequacy of the (security and technical) risk controls for the Bank’s information and technology systems.Contribute to the system-wide information security governance and compliance program, ensuring Information Technology, Development & Information Security activities, processes, and procedures meet defined requirements, policies, and regulations.Develop and implement effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with regulatory expectations and relevant legislation.Execute strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors.Familiarity with Information Technology, Development, Information Security, and Industry compliance frameworks such as FFIEC, PCI DSS, NIST CSF, Center for Internet Security, Agile, etc.Communicates with all levels of staff including Information Technology, and Development, management and staff, developers and other technical staff, general counsel, auditors, and technology vendors and contractors.Work with Internal Audit, State and Federal regulators as appropriate on required technology & security assessments, audits, and examinations.Coordinate, track and execute on all information technology and information security related audits and examinations including scope of audits, timelines, auditing agencies and outcomes.Work with auditors and regulators as appropriate to keep audit focus in scope, maintain excellent relationships with audit and regulatory entities and provide a consistent perspective on the bank’s governance, risk, and compliance efforts.Provide guidance, evaluation, and advocacy on audit responses.Must be able to assess computer hardware, software, and systems for security risks (or violations) and work with Information Technology, Information Security, consultants, and bank vendors to recommend solutions.Develop strategies to address awareness and training for all stakeholders. Must be able to assess the status of complex multi-location projects as well as identify and implement appropriate corrective measures to resolve issues as they arise.Must have a strong customer service orientation and the ability to project that attitude to other teams.Collaborate with bank Business Continuity department on Technology & Information Security business continuity planning, disaster recovery planning, and testing."
We need to split into separate list items. Each sentence ends with a period. Some sentences have no space after period (like "...program improvements.Operate"). We'll split accordingly.
We'll produce - for each.
Now Requirements: Position Requirements paragraph includes multiple sentences. We'll turn into list? The instruction: Use
- for any list of duties/requirements/benefits. So we should list requirements as bullet points. So we need to extract each requirement sentence.
Position Requirements text:
"Bachelor’s degree in computer science, information technology, software development, or another related fieldA self-starter, able to work under general supervision. Comfortable working with inter-related infrastructure, software development, and information security risk and compliance issues.5+ years of information technology/development experience including information security technology skills and expertise.Knowledge of information technology and/or software development risk management frameworks and compliance practicesKnowledge of information technology, software development, and information security controlsAbility to develop security policies, standards, and guidelines based on best practices and industry frameworks.Two to fiveThree to seven years participating in information technology, software development, or information security projects.Excellent interpersonal, communication, and presentation skills, including formal report writing experience.Understanding of common security standards and regulations relating to a financial services environment such as FFIEC, PCI DSS, NIST CSA, Center for Internet Security (CIS), MITRE ATT@CK., ISO 27000, Agile, etc.Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations.Knowledge of financial service industry legal and regulatory requirements"
We need to split sentences. There are missing spaces after periods again. We'll split.
We'll produce list items.
Now Preferred: "Preferred" section includes bullet-like sentences:
"Familiarity with security auditing and the financial regulatory examination process (Federal Reserve Bank, Federal Deposit Insurance Corporation, Office of the Comptroller of the Currency, FFIEC, etc.)Information security governance, risk, and/or compliance experience in financial services or federal/state/local government including documenting risk and compliance activities.Experience participating in information technology, software development, or information security audits and/or risk assessments.Experience producing key metrics, information visualization, and reports."
We'll split into list items under Qualifications heading.
Now we need to ensure we don't include any boilerplate like "Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life." That's company description; we keep.
Now output HTML fragment: start with
About the role
then Position Summary paragraph
Company description paragraph
. Then Responsibilities
...
. Then Requirements
...
. Then Qualifications
...
. No Skills, Benefits, Pay, Schedule.
Make sure to not include extra whitespace? It's fine.
Now craft the paragraphs exactly as in source, preserving punctuation and content.
Position Summary: "The Information Security
- for any list of duties/requirements/benefits. So we should list requirements as bullet points. So we need to extract each requirement sentence.
Position Requirements text:
"Bachelor’s degree in computer science, information technology, software development, or another related fieldA self-starter, able to work under general supervision. Comfortable working with inter-related infrastructure, software development, and information security risk and compliance issues.5+ years of information technology/development experience including information security technology skills and expertise.Knowledge of information technology and/or software development risk management frameworks and compliance practicesKnowledge of information technology, software development, and information security controlsAbility to develop security policies, standards, and guidelines based on best practices and industry frameworks.Two to fiveThree to seven years participating in information technology, software development, or information security projects.Excellent interpersonal, communication, and presentation skills, including formal report writing experience.Understanding of common security standards and regulations relating to a financial services environment such as FFIEC, PCI DSS, NIST CSA, Center for Internet Security (CIS), MITRE ATT@CK., ISO 27000, Agile, etc.Two to fiveThree to seven years participating in information technology, software development, or information security audits and examinations.Knowledge of financial service industry legal and regulatory requirements"
We need to split sentences. There are missing spaces after periods again. We'll split.
We'll produce list items.
Now Preferred: "Preferred" section includes bullet-like sentences:
"Familiarity with security auditing and the financial regulatory examination process (Federal Reserve Bank, Federal Deposit Insurance Corporation, Office of the Comptroller of the Currency, FFIEC, etc.)Information security governance, risk, and/or compliance experience in financial services or federal/state/local government including documenting risk and compliance activities.Experience participating in information technology, software development, or information security audits and/or risk assessments.Experience producing key metrics, information visualization, and reports."
We'll split into list items under Qualifications heading.
Now we need to ensure we don't include any boilerplate like "Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life." That's company description; we keep.
Now output HTML fragment: start with
About the role
thenPosition Summary paragraph
Company description paragraph
. ThenResponsibilities
- ...
Requirements
- ...
Qualifications
- ...