IT Risk Assessment, Senior Manager

Company: Johnson Controls
Location: Boca Raton
Posted on: February 22, 2021

Job Description:

The Risk AssessmentProgram is accountable for facilitating risk-aware business decision-making inwhich speed-to-market and delivery objectives are balanced with GlobalInformation Security Program objectives that ensure the confidentiality,availability and integrity of IT processes in delivery engagements.-- This rolewill collaborate closely with partners in security, governance, compliance, IToperations, and business to design and execute assessments that identifies,analyzes, and communicates inherent and residual risk associated with deliveryengagements and the technology ecosystem governed by the Global InformationSecurity Program.-- The Senior Manager will support the organization's alignmentto, and adoption of, the three lines-of-defense principles in the management oftechnology operations. This position requires strong communication abilities,as it engages with cross-functional business partners, team members, andleadership across the organization. As an influential member of the riskmanagement function, this position addresses systems and processes that impact technologyoperations environments and reinforces the compliance culture at JCI bydemonstrating a strong understanding of current and upcoming trends incybersecurity risk management, compliance, and complementary audit requirementsand controls. How you will do it:

• Administers the Risk Assessment Program within GlobalInformation Security function
• Designs methods that ensures risks are properly identified,evaluated, communicated, and the appropriate level of controls are implemented
• Designs, develops, and maintains the IT risk managementframework, which includes the risk register, facilitates the identification ofkey controls, and key processes for testing controls
• Ensures the execution of streamlined assessments on alldelivery projects through close collaboration with delivery organizations andsubject matter experts
• Designs and executes procedures to address findings includingrisk acceptance and management escalation based on the level of associated risk
• Designs and executes procedures to report on assessmentcoverage
• Identifies opportunities to mature processes, deepenengagement with partners, and mature control health across the IT ecosystemgoverned by Global Information Security
• Leverages tools and technologies including Service Now GRCcapabilities to streamline and mature risk assessment activities
• Coaches and develops staff
• Educates partners on the principles of three lines-of-defense
• Continually supports organizational alignment and enablesfocused execution through strong management and leadership practices
• Supports the administration of the JCI common controlsframework to ensure relevant internal and external information security requirementsare mapped to risks and adequately tested
• Maintains risk assessment program related policy, standardand procedure documentation to drive consistent, reliable, and repeatableassessment activities
• Supports the development and implementation of securityawareness, training, and continuous improvement efforts --What we look for:
  • Five or more years' ofprogressive Internal Audit or Information Security work experience within arelevant role and setting, with broad exposure to multiple competing regulatoryand industry-based requirements and environments.
  • Experience inoperationalizing IT audit, risk or compliance activities and programs, andproven presentation and facilitation skills
  • Experience presentingreporting to management
  • Experience workingwith ISO 27001, NIST 800-53 security frameworks and PCI DSS Standard in complexIT operating environments is required.
  • Exceptional teamingskills incorporating cross-functional teams, peer relationships, informing, andunderstanding and appreciating differences.
  • Strong projectmanagement, prioritization, presentation, and facilitation skills, demonstratedability to effectively manage multiple tasks and priorities and drive changeacross a complex organization, through multiple stakeholders
  • Strong consultativeskills, with the ability to advise and consult with business and technicalprofessionals.
  • CRISC, (Certified inRisk and Information System Control) Information Security Auditor), CISM (CertifiedInformation Security Manager), CISSP (Certified Information System SecurityProfessional) or similar industry certification is preferred Someinternational travel may be required.-- Johnson Controls is a global diversified technology andmulti industrial leader serving a wide range of customers in more than 150countries. Our commitment to sustainability dates back to our roots in 1885,with the invention of the first electric room thermostat. We are committed tohelping our customers win everywhere, every day and creating greater value forall of our stakeholders through our strategic focus on buildings. Johnson Controls is an equal employment opportunity andaffirmative action employer and all qualified applicants will receiveconsideration for employment without regard to race, color, religion, sex,national origin, age, protected veteran status, status as a qualifiedindividual with a disability, or any other characteristic protected by law. Formore information, please view EEO is the Law. If you are an individual with adisability and you require an accommodation during the application process,please visit www.johnsoncontrols.com/tomorrowneedsyou . Previous Job Searches My Profile Create and manage profiles for future opportunities. --- United States of America, Wisconsin, Milwaukee --- United States of America, Wisconsin, Milwaukee --- United States of America, Tennessee, Nashville

Keywords: Johnson Controls, Boca Raton , IT Risk Assessment, Senior Manager, Executive , Boca Raton, Florida