Experienced Information Security Manager – Technology Risk Oversight and Management Professional for Full-Time Remote Opportunity at arenaflex

Introduction to arenaflex and the Industry arenaflex is a leading organization in the private sector, committed to operating in a risk-free environment within regulatory expectations. As the world becomes increasingly dependent on digitalization and technology, managing technology risk has become a critical aspect across organizations. Cyberattacks are on the rise, and it's essential for companies like arenaflex to have a robust technology risk management program in place. The Global Risk and Compliance (GRC) team at arenaflex is responsible for providing oversight and management of risks to ensure the organization operates smoothly and securely. About the Job This is an exceptional opportunity to join the second line technology risk oversight team within the GRC group at arenaflex, headed by the Chief Risk Officer (CRO). As an Information Security Manager, you will be part of a diverse and talented team responsible for building the technology risk management program and providing independent risk oversight to technology, cybersecurity, and business continuity management risks. You will report to the Head of Technology Risk Oversight and be responsible for independently assessing and reporting risks, providing a comprehensive view of total risks to Senior Management, Risk Management Committees, Board of Directors, and Regulators. Key Responsibilities Conduct independent, proactive risk management and oversight of technology, cybersecurity, and business continuity management risks generated within business cycles or resulting from the use of technology. Perform data-driven audits focused on technology processes, cybersecurity controls, and business continuity management risks. Lead exploratory data analysis on large datasets using SQL, Python, and Excel to develop meaningful insights into cybersecurity and technology-related data. Develop and enhance data-driven key risk indicators and key performance indicators that provide real-time insights into risk and performance trends. Learn technology, cybersecurity, and business continuity management processes at arenaflex, demonstrating a strong interest and willingness to present an effective valid challenge. Stay up-to-date with relevant regulations, guidelines, and industry standards. Support the design of an independent technology risk oversight program that defines the engagement and integration with other risk management programs, including Process Risk Self-Assessments, Business Continuity Management, New Product Approval, Mergers and Acquisitions, and more. Essential Qualifications 5 years of experience in risk management across any of the three lines of defense. Proven ability to identify risks, analyze issues, and derive significant insights about risk trends by conducting interviews and analyzing large volumes of data. Solid knowledge of System, cloud security, cyber intelligence, and cyber incident response areas. Excellent analytical skills with high attention to detail and accuracy. Solid knowledge of at least one of the data mining/big data analytical tools (e.g., Microsoft Excel: Pivot Tables, SQL, SAS, Python, R). Strong critical thinking and problem-solving skills. Self-starter who can work with minimal supervision. Exceptional verbal, written, and interpersonal skills. Ability to challenge conventional thinking by actively engaging in constructive dialogue. Preferred Qualifications Education background: Computer Science or Information Systems. Experience in risk management across cybersecurity, information technology, third-party, business continuity management. Industry certifications (e.g., CISM, CISA, CRISC, CISSP). Cloud security certifications (e.g., CCSK, CompTIA Cloud, CCSP, Azure Security, etc.). Understanding of risk assessment methodologies, frameworks, and industry standards (e.g., COSO, COBIT, ISO 27001, FAIR, or NIST RMF). Knowledge of significant policies and regulations (e.g., OCC Enhanced Standards, FFIEC IT booklets). Experience with Governance, Risk, and Compliance (GRC) tools (e.g., RSA Archer, etc.). Career Growth Opportunities and Learning Benefits At arenaflex, we are committed to providing our employees with opportunities for growth and development. As an Information Security Manager, you will have the chance to work with a talented team of professionals, develop your skills and expertise, and contribute to the development of our technology risk management program. You will also have access to training and development programs, industry conferences, and networking events to stay up-to-date with the latest trends and best practices in the field. Work Environment and Company Culture arenaflex is a dynamic and inclusive organization that values diversity, equity, and inclusion. We are committed to creating a work environment that is collaborative, innovative, and supportive. Our company culture is built on a foundation of trust, respect, and open communication, and we strive to create a workplace where everyone feels valued, empowered, and able to contribute their best work. Compensation, Perks, and Benefits arenaflex offers a competitive compensation package, including a salary of $28 per hour, as well as a range of benefits and perks, such as health insurance, retirement savings plans, and paid time off. We also offer opportunities for professional development, flexible working arrangements, and a dynamic and supportive work environment. Conclusion If you are a motivated and experienced risk management professional looking for a new challenge, we encourage you to apply for this exciting opportunity at arenaflex. As an Information Security Manager, you will play a critical role in helping us manage technology risk and ensure the security and integrity of our systems and data. Don't miss out on this chance to join a talented team of professionals and contribute to the success of our organization. Apply now to take the first step towards a rewarding and challenging career at arenaflex! Apply for this job