What are the responsibilities and job description for the SVVP Risk Management Consultant position at V Group Inc.?
End Client: New York City Department of Social Services
Job Title: SVVP Risk Management Consultant
Duration: 36 - 60 Months
Start Date: ASAP
Location: 505 Clermont Ave, 3rd Floor, Brooklyn NY 11238
Position Type: Contract
Interview Type: Webcam
PROJECT NAME: The Data Center Colocation and Migration
Project Overview : NYC DSS is undertaking a large-scale Data Center Co-location and Migration Project to modernize its IT infrastructure. Approximately 90% of current data center infrastructure is reaching End-of-Life (EOL) / End-of-Support (EOS)Migration from 15 MetroTech Center to 11 MetroTech (Brooklyn, NY) Consolidation of multiple data centers into a single co-location facility
Objective:
- Identifies, analyzes, assesses and mitigates risks associated with security controls and SVVP execution. Focuses on identifying, assessing, and mitigating risks that could impact the security and compliance of the migration process.
Scope:
- Evaluates control risks exposure and advises on mitigations and treatment strategies. Acts as the risk intelligence advisor for SVVP.
Risk Assessment and Mapping:
- Assess and map potential risks associated with data center migration, focusing on misconfigurations, vulnerabilities, and potential incidents.
- Identify risk areas related to network security, data protection, access controls, and infrastructure changes during migration.
Development of Risk Mitigation Strategies:
- Develop mitigation strategies based on the identified risks to minimize the impact of potential security breaches during migration.
- Design and implement risk management procedures to ensure the data center migration remains secure and compliant.
Operationalization of Risk Controls:
- Activate risk management protocols to actively monitor and mitigate security risks throughout the migration process.
- Enforce policies to ensure that risk levels stay within acceptable thresholds during transition and post-migration.
Launch of Continuous Risk Monitoring:
- Launch risk monitoring tools to track and report security risk factors during migration.
- Configure tools for post-migration risk assessments, ensuring ongoing protection and compliance in the newly configured data center environment
Required Skills :
- 10 years of IT risk management, cybersecurity, and governance experience
- 7 years of experience leading enterprise risk management initiatives
- 7 years of experience overseeing risk during large-scale infrastructure transformation
- 7 years of experience performing third-party/vendor risk oversight
- 7 years of experience designing risk mitigation frameworks