Overview

Lead a team focused on building the Risk Management Framework (RMF) program across the company and support the various lines of business to ensure our compliance to the laws, regulations, and contractual obligations. This collaborative team operates cross-divisionally throughout Esri and helps identify risks and develop mitigation strategies to help ensure the success of the business.

Responsibilities

• Stay informed of pending industry changes, trends and best practices and assess the potential impact of these changes on organizational information security policies, procedures, and processes
• Lead RMF related activities such as the coordination of internal and external audits, POAM management efforts, and staying up to date with new and existing customer and regulatory requirements
• Work with our legal and contracts teams to address security requirements from our customers and to ensure our vendors are complying with Esri security requirements
• Partnering with the enclave architect to provide leadership and oversight for all aspects of the EsriTech enclave
• Help improve our processes related to security reviews, assessments, and risk management
• Successfully set priorities, perform tasks in an orderly fashion, and meet time deadlines
• Monitor and track the progress and status of the remediation actions and escalate any issues or delays
• Assist in the development and implementation of Esri's GRC framework, policies, and procedures
• Conduct risk assessments and audits to evaluate the effectiveness of the company's internal controls and compliance with applicable laws, regulations, policies, and standards
• Help improve our processes related to security reviews, assessments and risk management
• Proactively communicate and collaborate with other teams/divisions to promote shared objectives
• Ensure timely and high-quality work from your team
• Develop working relationships with peers and senior management across the company to effectively establish a sustainable operating model
• Provide direct supervision as you lead and mentor your team

Requirements

• A keen interest in learning and developing skills and understanding in the IT security and system management spaces is necessary to foster the communications and relationships central to this role
• 5 years of work experience in cyber security and/or leadership or management in a technical field
• Strong interpersonal and communication skills to work effectively with IT and business units; ability to bridge communications between technical IT team members and compliance team members
• Strong attention to detail, customer orientation, communication, and presentation skills including the ability to list and quickly translate business needs into solutions and build effective working relationships
• Strong, self-motivated, and productive team player with ability to thrive in a dynamic environment
• Proven experience driving consensus across multiple stakeholders at all levels of the organization
• Effectively engage business and technical stakeholders at the tactical, day-to-day level, balanced with strategic planning at executive levels
• Solid understanding and experience with Agile
• US citizenship and ability and willingness to obtain a security clearance

Recommended Qualifications

• Experience influencing without authority, managing ambiguity, and balancing competing goals and objectives.
• CRISC or CISSP certification

#LI-NR5

#LI-Hybrid