Information Risk Lead Resume Sample
Work Experience
- Relationship building with technology management, business management, program sponsors, vendors and business clients
- Oversee the transition of end user and data center services to the corporate support model and technologies
- Oversee a common integration model of various infrastructure technology teams into the corporate support model ensuring continued support of current business activities
- Oversee execution and remediation of action plans by the teams, tracking the progress of milestones, validation of control effectiveness, and reporting of the progress
- Oversee the execution and compliance of cyber related book of works, and infrastructure hygiene efforts
- Working with businesses, application development and technology areas to develop solutions to address control gaps, and to define workflow management gaps to be remediated as part of the integration activities
- Document current infrastructure technology book of work to identify resource gaps and workload opportunities to leverage corporate resources, and prioritize risk-based distribution of workload
- Working with technology teams, define target state architectural design of the intercorporate technology architecture which complies to corporate, regulatory, and industry requirements
- Working with the TCO organization, lines of business and infrastructure teams to deploy appropriate compensating controls to address security and risk gaps
- Driving corporate IT Risk initiatives, setting direction and implementing initiatives
- Act as a communication channel between technology and the business for ongoing program management status and issues
- Manage workload of Project Resources to proactively identifying and resolving issues that would present a risk to on-time implementation of the program/project
- Identify opportunities for improving third party risk posture as well as JPMC’s third party risk management processes, including expanded monitoring, KRI tracking, etc
- Promote standardization of the framework for execution of Technology RCSA’s across CMA in alignment with CCB Oversight and Control’s RCSA Procedures, including process definition, assessment scheduling, communication, execution, and reporting on CCB Technology RCSAs
- Support internal education and best practices sharing with peers and colleagues, as well as third party education & awareness, as needed.
- Maintain and enhance the ‘evergreen’ process to ensure the compliance with all IAS guidelines
- Engage with the third party providers, and drive all aspects of the application controls assessment and application development life cycle assessment
- Periodically track outstanding Remedies and escalate issues associated with third parties as needed
- Defining, supporting and implementing components of CCB's Identity & Access Management strategy. Translating business requirements into specific system, application or process designs, including
- Service owner in the creation and evergreen processes related to the following
- Review and enhance reporting that articulates the firm’s risk posture, while ensuring the quality is appropriate for executive management consumption
- Experience in Information Technology, Risk and Cyber Security, or IT Controls (CISA/CRISC an advantage)
Education
Professional Skills
- Experience using organizational, time-management, and office automation skills to facilitate efficient job functionality and team goals
- Related business experience, including experience in 1-2 years in Risk Management and/or Technology Audit functions
- IT Risk, Audit or Operational Risk experience or equivalent work experience
- Subject matter expertise and previous experience in cyber security, including engineering, operations, or testing
- Experience managing and/or directing an IT team
- Business re-engineering / process improvement experience including such techniques as Six Sigma or Capability Maturity Model (CMM)
- Experience managing small to medium-scale initiatives and projects
How to write Information Risk Lead Resume
Information Risk Lead role is responsible for reporting, automation, design, architecture, security, integration, training, technology, metrics, compliance.
To write great resume for information risk lead job, your resume must include:
- Your contact information
- Work experience
- Education
- Skill listing
Contact Information For Information Risk Lead Resume
The section contact information is important in your information risk lead resume. The recruiter has to be able to contact you ASAP if they like to offer you the job. This is why you need to provide your:
- First and last name
- Telephone number
Work Experience in Your Information Risk Lead Resume
The section work experience is an essential part of your information risk lead resume. It’s the one thing the recruiter really cares about and pays the most attention to.
This section, however, is not just a list of your previous information risk lead responsibilities. It's meant to present you as a wholesome candidate by showcasing your relevant accomplishments and should be tailored specifically to the particular information risk lead position you're applying to.
The work experience section should be the detailed summary of your latest 3 or 4 positions.
Representative Information Risk Lead resume experience can include:
- Identify automation and process improvement initiatives to improve the efficiency of CCB’s IT risk reporting processes
- Support compliance process for RFT application/IT rollouts in APAC region, this includes but not limited to
- Assist in documenting and implementing processes related to on-boarding requirements for applications/platforms feeding into the firm’s risk management tools
- Understand respective program initiatives and expectations
- Track the status of infrastructure/cyber security issues and related remediation efforts
- Influence application development response and deployment
Education on an Information Risk Lead Resume
Make sure to make education a priority on your information risk lead resume. If you’ve been working for a few years and have a few solid positions to show, put your education after your information risk lead experience. For example, if you have a Ph.D in Neuroscience and a Master's in the same sphere, just list your Ph.D. Besides the doctorate, Master’s degrees go next, followed by Bachelor’s and finally, Associate’s degree.
Additional details to include:
- School you graduated from
- Major/ minor
- Year of graduation
- Location of school
These are the four additional pieces of information you should mention when listing your education on your resume.
Professional Skills in Information Risk Lead Resume
When listing skills on your information risk lead resume, remember always to be honest about your level of ability. Include the Skills section after experience.
Present the most important skills in your resume, there's a list of typical information risk lead skills:
- Experience working with Global Identity and Access Management tools and processes
- Experience in an Information Risk role
- Experience in IT Risk management, audit or equivalent
- Any graduate with 9-10+ years of relevant IT Risk and Audit experience
- Provide superior communications to customers, senior IT management and other stakeholders during critical issues
- Drive a risk mitigating culture within CB Technology to proactively identify, assess and manage inherent risks within our applications, platforms and services
List of Typical Skills For an Information Risk Lead Resume
Skills For Information Risk Lead-risk & Control Self-assessment Resume
- Translates service and solution requirements into project objectives and tasks
- Identify key operational readiness criteria, schedule, alignment, and success factors with deployment schedule
- Produce reports, analyze data and consult on business cases
- Produce reports and analyze data for all teams within the compute service
- Maintain expertise and keep informed of developments and trends as they relate to the technology
- Act as the key point of contact for location technology risks identified in ICS Compute
Skills For Information Risk Lead / Privileged Access Resume
- Review and approve Exception requests after extensive analysis and confirmation that no other alternative is available
- Manage the risk profile and drive hygiene remediation actions where needed as part of Technology Infrastructure hygiene
- An in-depth knowledge of data protection strategies, network and system vulnerabilities
- Manage multiple assessment programs across CCB IT Risk
- Implementation of a sustainable operational risk management program through the execution of risk and control self-assessments
- Professional IT risk management framworks/concepts control self assessment process are required.
Skills For Senior Information Risk Lead Resume
- Support CB Technology’s on-boarding efforts to the firm’s strategic access management tool set, with a specific focus on the privileged access management tools, EPV AIM and EPV BG. Effectively create, maintain and communicate operational metrics and the status of CB on-boarding efforts to the strategic access management tool set
- Provide leadership and advise on access management remediation activities ensuring appropriate resolution of issue(s)
- Assist in CB’s long term technology access management and risk and control strategy designed to keep the information assets of CB secure
- Partner with the other Lines of Businesses and Global and Identity Access Management (GI&AM) to support the access management agenda within the technology control environment driving control optimization, process efficiency and improved client experience
- Proactively identify potential risk exposures within new technology solutions being designed and implemented, and partner with application development teams and G&IAM to implement appropriate solutions to mitigate exposure
Skills For CCB Information Risk Lead Resume
- Proactively engage with the Technology Control Officers (TCOs) in CB to drive the access management control agenda
- Provide expertise and knowledge of current industry trends in information and security standards to improve controls across CB
- Strengthen CB Technology’s control environment through education, collaboration and oversight
- Experience in training, education or mentoring, as a significant portion of the role is educating others regarding risk and improving the understanding of the risk environment