Verizon Sr. Principal Information Risk Management Transformation in Ashburn, Virginia
What you’ll be doing...
The Sr. Principal Information Risk Management (“IRM”) Transformation will be responsible for leading, driving, coordinating, articulating, and tracking activities related to developing and executing the IRM transformation initiative, which will transform the methods, processes, standards and organizational interactions necessary to transform Verizon’s end-to-end Enterprise Information Risk Management lifecycle. This will include driving the implementation of the IRM Strategy in alignment with the broader Corporate Information Security strategy, the various security and technology service-specific strategies and ultimately aligned with the company’s business strategies. You will perform research and oversee activities as assigned primarily within information risk management and audit lifecycle management. You will lead a series of work streams and programs and engage with the business and various functions and stakeholders, such as global technology services, information security officers, finance, legal, regulatory, compliance, audit, supply chain and others, to effectively implement the IRM strategy both on an initial and on-going basis.
The Sr. Principal IRM Transformation will:
Lead the development and execution of the programs delivering the IRM Strategy in the Corporate Information Security organization.
IRM Plan - Develop and implement corporate-wide Information Risk Management transformation plan working across Verizon to include resource management, investment allocations and identification of key cyber security and risk programs and metrics that ensure the information risk management strategy is being executed effectively and meeting business outcomes and objectives. Review key cyber security and information risk reporting metrics and indicators across the business and delivery organizations. Provide on-going input and recommendations to support the development and adjustment the information risk management strategy, both in the short and long terms, based on the changing threat landscapes, changes in business and operating environments and changes across Verizon’s information security environment
IRM Actions – will lead and engage with the business and various functions such as global technology services, information security officers, finance, legal, regulatory, compliance, audit, supply chain to identify risks and opportunities to positively impact the IRM strategy and lead the subsequent implementation of the IRM strategy and plans.
Business Engagement – will have responsibility for engaging with business leaders and information security officers, on information risk matters ranging from policy and governance to security and technical service operations. Provide leadership and manage all administrative and tracking of activities related to the execution of the IRM strategy across Verizon. Lead and ensure coordination and consensus with other Verizon Business Unit security teams and information security officers, to align processes and procedures to ensure common approach to risk management activities.
You will interact and provide executive level communications to VPs, SVPs and CIOs.
What we’re looking for...
You'll need to have:
Bachelor's degree or four or more years of work experience.
Six or more years of relevant work experience.
Experience in managing information risk and information security functions, strategy and/or risk within a Fortune 100 company with greater than 100K employees.
Experience in strategy development and execution (e.g. cyber security and information risk management)
Experienced in organizational, operational and / or process transformation (e.g. IT, technology services, cyber security and information risk management)
Even better if you have:
Then or more years of combined experience in IT, application development and support, and/or cyber security.
Demonstrated knowledge of cyber security and information risk management concepts, cybersecurity frameworks, control standards, secure coding principles, and security technologies.
Knowledge of information security fundamentals, best practices and industry standards with prior responsibilities of protecting information assets.
Experience with ISO 27001-2, NIST 800-53, NIST 3000 or other related standards.
Knowledge in multiple cybersecurity areas such as Identity and Access Management, Security Governance, Information Risk, Awareness and Education and/or Security Strategy.
Proven experience in cyber security and information risk management while considering business drivers and implications.
Experience creating and maintaining partnering relationships with business leaders at VP, SVP, CIO levels with the ability to interact and provide executive level communications.
Experience working with cross-functional teams.
Strong communication, presentation and analytical skills along with the ability to thrive in a dynamic environment and handle multiple priorities.
When you join Verizon...
You’ll have the power to go beyond – doing the work that’s transforming how people, businesses and things connect with each other. Not only do we provide the fastest and most reliable network for our customers, but we were first to 5G - a quantum leap in connectivity. Our connected solutions are making communities stronger and enabling energy efficiency. Here, you’ll have the ability to make an impact and create positive change. Whether you think in code, words, pictures or numbers, join our team of the best and brightest. We offer great pay, amazing benefits and opportunity to learn and grow in every role. Together we’ll go far.
Equal Employment Opportunity
We're proud to be an equal opportunity employer- and celebrate our employees' differences, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and Veteran status. Different makes us better.
- Verizon Jobs