Staff Cybersecurity Controls Specialist

The Staff Cybersecurity Controls Specialist is responsible for working with information security partners to document, manage, and monitor progress toward achieving risk mitigation. This person will work very closely with process owners to evaluate risks and control posture related to information security objectives; identify emerging risks; facilitate identification of control weaknesses; and monitor and manage the lifecycle of information security-related issues.

About the role

• Management and oversight of risks and controls for information security objectives across the enterprise
• Partner with security leaders and staff to identify and document risks related to information security objectives
• Execute formal Risk and Control Self-Assessment (RCSA) activities in coordination with security risk owners
• Work with 2LOD and audit teams to coordinate monitoring activities and objectives
• Prepare committee materials, briefings, summary reports, and other documentation for executive-level audiences
• Aid in the preparation of training materials related to information security risks
• Drive accountability with process owners to ensure timely identification and remediation of security-related control issues
• Exceed timeliness goals and meet deadlines for mitigating issues
• Provide input and subject matter guidance on information security policies and standards
• Maintain a comprehensive understanding of existing and emerging regulatory requirements, operational processes, inherent risks, and internal policies & practices to provide advice to stakeholders
• Communicate information security risk posture to senior management and stakeholders

Responsibilities

• Manage and oversee risks and controls for information security objectives across the enterprise
• Collaborate with security leaders and staff to identify and document risks related to information security objectives
• Execute formal Risk and Control Self-Assessment (RCSA) activities in coordination with security risk owners
• Coordinate with 2LOD and audit teams to monitor and manage the lifecycle of information security-related issues
• Prepare committee materials, briefings, summary reports, and other documentation for executive-level audiences
• Support the development and implementation of training materials related to information security risks
• Ensure timely identification and remediation of security-related control issues
• Provide input and guidance on information security policies and standards
• Communicate information security risk posture to senior management and stakeholders

Requirements

• Minimum 7 years of experience in cybersecurity risk management in a financial services and/or banking operating environment; specifically managing first or second line of defense risk and controls activity
• Experience with interacting and solutioning with information security teams to document and measure control effectiveness
• External audit, internal audit, or 2LOD information security risk experience
• Strong ability to promote a culture of ownership, accountability, and collaboration
• Strong verbal and written communication skills
• Strong understanding of risk management frameworks and best practices
• Strong analytical and problem-solving skills
• Excellent communication and presentation skills
• Ability to balance multiple critical priorities simultaneously
• Experience in highly-matrixed, fast-paced environments
• A Bachelor's Degree or 4 years of relevant experience in lieu of a degree

Qualifications

• Minimum 7 years of experience in cybersecurity risk management in a financial services and/or banking operating environment; specifically managing first or second line of defense risk and controls activity
• Experience with interacting and solutioning with information security teams to document and measure control effectiveness
• External audit, internal audit, or 2LOD information security risk experience
• Strong ability to promote a culture of ownership, accountability, and collaboration
• Strong verbal and written communication skills
• Strong understanding of risk management frameworks and best practices
• Strong analytical and problem-solving skills
• Excellent communication and presentation skills
• Ability to balance multiple critical priorities simultaneously
• Experience in highly-matrixed, fast-paced environments
• A Bachelor's Degree or 4 years of relevant experience in lieu of a degree

Skills

• Experience in cybersecurity risk management
• Knowledge of risk management frameworks and best practices
• Strong communication and presentation skills
• Ability to manage multiple priorities
• Experience in a matrixed, fast-paced environment

Benefits

To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!

Pay

The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

Schedule

N/A