Business Information Risk Officers (BIRO) are responsible for ensuring Risk and Control owners and all staff are aware of the relevant information Security Risk policies and provide advice and guidance on how to ensure compliance. They perform risk based monitoring of Information and Cyber Security Risk controls / policies and standards to validate control effectiveness and monitor timely resolutions of information security issues including the capability to detect, respond and recover from incidents.
location: New York, New York
job type: Permanent
salary: $145,000 - 158,500 per year
work hours: 9am to 5pm
Undertake Information Security consultation - When required by the business, the BIRO can operate in a consultancy capacity for information security risks. This is vital for ensuring that information security controls are appropriate to the line of business and in line with the business's risk appetite. The BIRO may provide guidance to the business regarding involvement of other key stakeholders (e.g. Information Security Risk and IT Security).
Support the business with the implementation of information security controls - This also may involve supporting the implementation of ISR projects/programs as outlined in the BIRO Standard Operating Procedures including:
· Information Security & Cyber Risk Education and Awareness
· End User Information Security
· Third Party Controls
· Physical Information Security
· Data Leakage Prevention (DLP)
· Risk & Control Assessments
· Information Risk Identification and Management
· Access Management
skills: Information Security & Cyber Risk Education and Awareness, End User Information Security, Third Party Controls, Physical Information Security, Data Leakage Prevention,(DLP), Risk & Control Assessments, Information Risk Identification and Management, Access Management
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.