GRC Issue Management Specialist

Company Details Company URL: Berkley Technology Services (BTS) is the dynamic technology solution for W. R. Berkley Corporation, a Fortune 500 Commercial Lines Insurance Company. With key locations in Urbandale, IA and Wilmington, DE, BTS provides innovative and customer-focused IT solutions to the majority of WRBC's 60+ operating units across the globe. BTS's wide reach ensures that ideas and opinions are considered at every level of the organization to guarantee we find the best solutions possible. Driven by a commitment to collaboration, BTS acts as consultants to our customers and Operating Units by providing comprehensive solutions that not only address the challenge at hand, but proactively plan for the "What's Next" in our industry and beyond. With a culture centered on innovation and entrepreneurial spirit, BTS stands as a community of technology leaders with eyes toward the future -- leaders who truly care about growing not only their team members, but themselves, and take pride in their employees who shine. BTS offers endless ways to get involved and have the chance to grow your career into a wide range of roles you'd never known existed. Come join us as we push forward into the future of industry leading technological solutions. Berkley Technology Services: Right Team, Right Technology, Simple and Secure. The Company is an equal employment opportunity employer. Responsibilities The GRC Issues Management Specialist reports to the Sr. Director of IT GRC and is located in either Urbandale, Iowa, Wilmington, Delaware, or remote would be available for the right candidate. This is an exciting role for a dynamic GRC professional to become an integral part of a global Fortune 400 (W.R. Berkley) Governance Risk and Compliance program's operational activities. This role may be filled at the Manager level based on the one's ability to be a thought-leader, highly qualified subject matter expert, and hands-on professional with the experience and know-how needed to guide and accelerate their respective program. This position entails day-to-day operations of the issue management team and processes to support information security and information technology programs, including but not limited to quality assurance of deliverables, assessing issue risk and remediation plans and guiding teams/stakeholders on issue management processes and methodology. Key functions include but are not limited to: * Coordinate daily operational activities of the issue management program and team. * Facilitate meetings, work with stakeholders, provide technical expertise for GRC best practices and Issue Management methodology * Conduct Quality Assurance activities by reviewing issue management process deliverables and relevant guidance to mentor and improve team-member work-product quality and consistency. * Update and maintain process documentation, procedures, visual aids, while also identifying and proposing process improvements * Monitor and present related metrics for the program and individual contributor SLA's * Assess issue risks, and/or effectiveness of remediation steps and/or compensating controls in order to facilitate a risk assessment and/risk acceptance. Qualifications * Minimum of 5 years of hands-on experience within Governance, Risk, Compliance with an emphasis on control assessments, risk assessments and/or issue remediation * 3+ years of relevant experience and technical background in network, infrastructure, and/or application development disciplines is ideal, or proven ability to review technical components to address control effectiveness and/or risk assessment from a compliance/audit perspective. * College Degree, CS, IT or related technical discipline * Experience within the Insurance or Financial industries, along with relevant certifications as CISA, are preferred * Hands on experience with GRC tools (i.e. Archer, ServiceNow, OneTrust, etc) preferred * 2+ Years in Big Four IT Audit Advisory preferred * Proven ability to guide or train others control frameworks and/or control assessments processes using COBIT, UCF, NIST and ISO * Extremely detail oriented with excellent organizational and planning skills and equally proficient oral and written communication acumen * Must be a self-starter and able to handle multiple tasks and/or projects concurrently. Comfortable with speaking with both business and technical personnel to document issues and potential impact * Bachelor's degree in Information Security, Business Administration, Computer Science, or a related field. Advanced degree (e.g., MBA, MS) preferred Additional Company Details We do not accept unsolicited resumes from third party recruiting agencies or firms. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Sponsorship Details Sponsorship not Offered for this Role Responsibilities The GRC Issues Management Specialist reports to the Sr. Director of IT GRC and is located in either Urbandale, Iowa, Wilmington, Delaware, or remote would be available for the right candidate. This is an exciting role for a dynamic GRC professional to become an integral part of a global Fortune 400 (W.R. Berkley) Governance Risk and Compliance program's operational activities. This role may be filled at the Manager level based on the one's ability to be a thought-leader, highly qualified subject matter expert, and hands-on professional with the experience and know-how needed to guide and accelerate their respective program. This position entails day-to-day operations of the issue management team and processes to support information security and information technology programs, including but not limited to quality assurance of deliverables, assessing issue risk and remediation plans and guiding teams/stakeholders on issue management processes and methodology. Key functions include but are not limited to: - Coordinate daily operational activities of the issue management program and team. - Facilitate meetings, work with stakeholders, provide technical expertise for GRC best practices and Issue Management methodology - Conduct Quality Assurance activities by reviewing issue management process deliverables and relevant guidance to mentor and improve team-member work-product quality and consistency. - Update and maintain process documentation, procedures, visual aids, while also identifying and proposing process improvements - Monitor and present related metrics for the program and individual contributor SLA's - Assess issue risks, and/or effectiveness of remediation steps and/or compensating controls in order to facilitate a risk assessment and/risk acceptance.

Created: 2024-11-12