IT and Cyber Risk Assessment Specialist

Job not on LinkedIn

🔥 11 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

💵 $55.7k - $100.2k / year

⏰ Full Time

🟢 Junior

💻 IT Support

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Lincoln Financial

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1905

💼 Consulting

⚖️ Legal

💸 Finance

Consulting • Legal • Finance

Lincoln Financial is an organization dedicated to protecting the privacy and security of its job applicants. It actively informs candidates about potential recruitment scams and outlines its robust hiring procedures, making clear that they do not request sensitive personal information during the application process. The company offers a diverse range of career opportunities across various fields including actuarial, finance, legal, and customer service, and is committed to maintaining equal employment opportunities.

📋 Description

• Applies functional knowledge related to identifying, assessing, reporting and mitigating IT and Cyber risk for the enterprise • Proactively collaborates with business and technology leadership and other stakeholders to develop, recommend, and implement mitigation solutions • Supports the development of measures to monitor effectiveness and progress of risk mitigation approaches • Maintains knowledge of current and emerging information security trends, threats, technologies, regulatory requirements, industry best practices, and AI-related risks applicable to assigned areas of responsibility • Supports departmental and enterprise initiatives by contributing to change management efforts, team objectives, and continuous improvement activities • Performs information security risk management activities and delivers on assigned projects while building expertise within assigned areas of responsibility • Identifies opportunities for process improvements that enhance efficiency, consistency, and quality and communicates recommendations to management • Conducts information security risk assessments of third-party vendors by reviewing security questionnaires, audit reports, control documentation, and other supporting evidence • Evaluates assessment results and assists in determining third-party information security risk profiles using established methodologies, company policies, and industry standards • Develops recommendations to address identified security gaps and collaborates with internal stakeholders and external parties to support risk mitigation and remediation efforts • Documents assessment activities, findings, recommendations, and communications within approved governance, risk, and compliance platforms • Responds to requests regarding the organization's information security practices by providing accurate, approved, and professionally written information • Partners with business stakeholders, risk functions, and other teams across the enterprise to support risk assessment activities, remediation tracking, and risk management efforts • Collects, maintains, and analyzes assessment and risk management data to support program oversight, reporting, and decision-making • Assists in the preparation of metrics, dashboards, reports, and presentations that communicate assessment results, risk trends, remediation progress, and program performance to stakeholders and leadership • Identifies trends, reporting opportunities, and data quality improvements to support continuous improvement efforts and informed decision-making • Applies critical thinking to analyze and synthesize information from multiple sources, including security questionnaires, audit reports, assessment evidence, policies, standards, and stakeholder discussions, to develop clear findings, recommendations, and reporting • Communicates effectively through both written and verbal channels, tailoring messages, reports, and presentations to technical, business, and leadership audiences • Assists in the development, maintenance, and implementation of information security standards, policies, procedures, and related documentation • Evaluates security considerations associated with third-party AI solutions and provides input based on established policies, standards, and industry best practices • Demonstrates curiosity and a willingness to learn emerging technologies, including AI, and explores opportunities to improve team processes, reporting, and analysis capabilities

🎯 Requirements

• 4 Year/Bachelor's degree (or equivalent) • 1 - 3+ Years of Information Security experience that directly aligns with the specific responsibilities for this position • Ability to read, analyze and interpret both internal and external documents such as general media/publications, professional journals, technical procedures, governmental regulations, policies, proposals, and standard operating procedures • Strong written and verbal communication skills • Demonstrates excellent organizational skills with the ability to prioritize workload and multi-task while maintaining strict attention to detail • Demonstrates solid project management skills including, critical ability to coordinate and balance multiple projects in a time-sensitive environment, under pressure, and meeting deadlines • Demonstrates strong interpersonal skills with a collaborative style • Demonstrates the ability to use sound judgment and discretion regarding confidential information • Finds common ground and can gain collaboration among management, colleagues and peers; can influence outcomes without directing or commanding • Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook) • Successfully completes regulatory and job training requirements • Agile Mindset; awareness/understanding of Agile methodologies (Preferred)

🏖️ Benefits

• Clearly defined career tracks and job levels • Leadership development and virtual training opportunities • PTO/parental leave • Competitive 401K and employee benefits • Free financial counseling, health coaching and employee assistance program • Tuition assistance program • Work arrangements that work for you • Effective productivity/technology tools and training