25,978 Security Professionals jobs in the United States
Information Security Risk Assessment Specialist

Posted today
Job Viewed
Job Description
We are currently seeking a Information Security Risk Assessment Specialist to join our team in Montreal, Quebec (CA-QC), Canada (CA).
**Job Responsibilities Include:**
+ Contacting system owners/vendors for assigned systems to gather relevant background material about the system/application and setting up interviews for information gathering.
+ Conducting remote/in-person interviews with system owners/vendors to get all the required information for assessment and to identify any gaps.
+ Reviewing system-related material including specifications, diagrams, requirements, and test plans to ensure security-related standards are followed.
+ Reviewing results with system owners/vendors and Senior Security Architecture Analysts, as needed. - Conducting security assessments using available documentation.
+ Creating comprehensive security architecture assessment reports that clearly identify root-cause and remediation strategies.
+ Developing and establishing global security standards and processes.
+ Evaluating new and emerging products and technologies while making recommendations concerning the introduction of new technologies
**Basic Qualifications:**
+ 5+ years of experience in Security Architecture Assessment.
+ Bachelor's degree in Information Systems Security or Computer Science
**Preferred Skills:**
+ Minimum of one professional certification amongst CISSP, SSCP, and CISM with good standing will be an added advantage.
+ Excellent verbal and written communications skills, including presentations to clients and senior technical resources.
+ Ability to manage expectations and handle high-pressure situations with tight deadlines.
+ Experience in an information security (application and/or infrastructure) role in an enterprise environment.
+ Ability to explain common application vulnerabilities and remediation strategies to developers.
+ Ability to explain technology risks; including XSS, CSRF, Injection attacks introduced by application vulnerabilities to a system's Business Owner.
+ Ability to quickly adapt to changing priorities and demands.
+ Excellent security knowledge (access control) of one or more applicable security technologies or platforms including SSO (Single Sign-On) technologies like SAML2.0 and Kerberos.
+ Excellent knowledge of information security processes, response procedures, and various attack methods used for information theft or network intrusion.
+ Excellent analytical and problem-solving skills.
+ Excellent knowledge of network technologies as they pertain to communications, computer system environments, and related infrastructures.
+ Excellent research ability and knowledge update on the security trends and attacks, following OWASP top 10 security understanding.
**#INDFSINS**
#L1-NorthAmrica
**About NTT DATA**
NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com ( DATA endeavors to make_** **_ **_accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at_** **_ **_._** **_This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here ( . If you'd like more information on your EEO rights under the law, please click here ( . For Pay Transparency information, please click here ( ._**
Security Engineer, Human Cyber Risk & Assessment
Posted 1 day ago
Job Viewed
Job Description
Hiring near our Irving, TX, Stamford, CT or Ft Meyers FL Centers of Excellence
About Gartner IT:
Join a world-class team of skilled engineers who build creative digital solutions to support our colleagues and clients. We make a broad organizational impact by delivering cutting-edge technology solutions that power Gartner. Gartner IT values its culture of nonstop innovation, an outcome-driven approach to success, and the notion that great ideas can come from anyone on the team.
About the role
Gartner information security teams are a group of passionate information security professionals dedicated to Protecting, Detecting, and Responding to threats. Our team is filled with lifelong learners who are consistently researching ways to better defend and stay ahead of the threats of tomorrow. We are a collaborative group, where good ideas come together whether they come from the most experienced or the newest members of the team.
We're looking for a well-rounded and motivated Security Engineer to join our Human Cyber Risk & Assessment Team . In this critical role, you'll be instrumental in safeguarding our organization from human-centric cyber threats. You'll leverage your expertise in information security best practices to identify, assess, and mitigate risks associated with human behavior, ensuring the protection of our sensitive data and systems. This is an excellent opportunity for a professional with 3+ years of experience in Information Security who is passionate about proactive security measures and building a strong security posture.
What you will do:
Conduct comprehensive assessments of human-centric cyber risks, identifying vulnerabilities and potential attack vectors tied to human actors like phishing, social engineering, and insider threats.
Design, implement, and manage Data Loss Prevention (DLP) strategies and controls to prevent unauthorized disclosure or exfiltration of sensitive information. You'll also monitor DLP alerts, investigate incidents, and recommend remediation steps.
Develop and implement programs to detect, analyze, and mitigate insider risks , including monitoring user behavior and collaborating with relevant stakeholders (e.g., HR, Legal) on incident response.
Stay ahead of current attack vectors , trends, and techniques used by threat actors targeting human vulnerabilities, proactively identifying emerging threats and recommending countermeasures.
Advocate for and ensure adherence to information security best practices across the organization, especially regarding human behavior and data handling.
Configure, monitor, and optimize security tools relevant to human cyber risk.
Support during security incidents related to human-centric threats, assisting with investigation, containment, eradication, and recovery efforts.
Contribute to the development and delivery of security awareness training programs to educate employees on human cyber risks and best practices.
Generate reports on human cyber risk posture, incident metrics, and the effectiveness of security controls, while maintaining accurate documentation of security processes.
Collaborate with cross-functional teams , including IT Operations, Legal, HR, and other security teams, to achieve security objectives.
What you will need:
Bachelor's degree in Computer Science, Information Security, or a related field required.
2+ years of hands-on experience in Information Security , with a focus on human cyber risk, data loss prevention, and insider threat.
Strong understanding of information security best practices, frameworks (e.g., NIST, ISO 27001), and regulatory requirements.
In-depth knowledge of Data Loss Prevention (DLP) principles, technologies, and implementation strategies.
Proven experience with Insider Risk Management methodologies and tools.
Familiarity with current attack vectors tied to human actors , including phishing, social engineering, business email compromise (BEC), and malware delivery.
Must have:
Experience with Proofpoint Email Security platforms.
Experience with Microsoft Defender (Endpoint, Identity, 365).
Experience with Microsoft Purview for data governance and information protection.
Excellent analytical and problem-solving skills with the ability to identify and assess complex security risks.
Strong communication skills (written and verbal) with the ability to explain technical concepts to non-technical audiences.
Ability to work independently and as part of a collaborative team.
Nice to have:
Experience with Zscaler ZIA (Zscaler Internet Access) .
Relevant security certifications (e.g., CISSP, CISM, GSEC, Security+, SSAP).
Who you are:
A lifelong learner with a desire for continuous personal and professional development.
Someone with proven communication, collaboration, and critical thinking skills.
Able to build trusting, meaningful relationships with peers, stakeholders, partners, and suppliers.
Capable of defining and communicating risk in a business-relevant language to both non-technical and technical audiences.
Someone who can apply expert knowledge to solve complex business/technical issues.
Don't meet every single requirement? We encourage you to apply anyway. You might just be the right candidate for this, or other roles!
What you will get:
Competitive compensation.
Limitless growth and learning opportunities.
Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more!
A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you.
A chance to make an impact - your work will contribute directly to our strategy.
Enjoy the flexibility of working from home and the energy of collaborating with peers in our dynamic offices.
20+ PTO days plus holidays and floating holidays in your first year.
Extensive medical, dental insurance and vision plan.
401K with corporate match, immediate vesting.
Health-and-wellness-related allowance programs.
Parental leave.
Tuition reimbursement.
Employee Stock Purchase Plan.
Employee Assistance Program.
Gartner Gives Charity Match.
And much more!
LI-Hybrid
#LI-DC3
Who are we?
At Gartner, Inc. (NYSE:IT), we guide the leaders who shape the world.
Our mission relies on expert analysis and bold ideas to deliver actionable, objective insight, helping enterprise leaders and their teams succeed with their mission-critical priorities.
Since our founding in 1979, we've grown to more than 21,000 associates globally who support ~14,000 client enterprises in ~90 countries and territories. We do important, interesting and substantive work that matters. That's why we hire associates with the intellectual curiosity, energy and drive to want to make a difference. The bar is unapologetically high. So is the impact you can have here.
What makes Gartner a great place to work?
Our sustained success creates limitless opportunities for you to grow professionally and flourish personally. We have a vast, virtually untapped market potential ahead of us, providing you with an exciting trajectory long into the future. How far you go is driven by your passion and performance.
We hire remarkable people who collaborate and win as a team. Together, our singular, unifying goal is to deliver results for our clients.
Our teams are inclusive and composed of individuals from different geographies, cultures, religions, ethnicities, races, genders, sexual orientations, abilities and generations.
We invest in great leaders who bring out the best in you and the company, enabling us to multiply our impact and results. This is why, year after year, we are recognized worldwide as a great place to work.
What do we offer?
Gartner offers world-class benefits, highly competitive compensation and disproportionate rewards for top performers.
In our hybrid work environment, we provide the flexibility and support for you to thrive - working virtually when it's productive to do so and getting together with colleagues in a vibrant community that is purposeful, engaging and inspiring.
Ready to grow your career with Gartner? Join us.
Gartner believes in fair and equitable pay. A reasonable estimate of the base salary range for this role is 74,000 USD - 113,000 USD. Please note that actual salaries may vary within the range, or be above or below the range, based on factors including, but not limited to, education, training, experience, professional achievement, business need, and location. In addition to base salary, employees will participate in either an annual bonus plan based on company and individual performance, or a role-based, uncapped sales incentive plan. Our talent acquisition team will provide the specific opportunity on our bonus or incentive programs to eligible candidates. We also offer market leading benefit programs including generous PTO, a 401k match up to $7,200 per year, the opportunity to purchase company stock at a discount, and more.
The policy of Gartner is to provide equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, ancestry, disability, veteran status, or any other legally protected status and to seek to advance the principles of equal employment opportunity.
Gartner is committed to being an Equal Opportunity Employer and offers opportunities to all job seekers, including job seekers with disabilities. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access the Company's career webpage as a result of your disability. You may request reasonable accommodations by calling Human Resources at +1 ( or by sending an email
Job Requisition ID:87462By submitting your information and application, you confirm that you have read and agree to the country or regional recruitment notice linked below applicable to your place of residence.
Gartner Applicant Privacy Link:
For efficient navigation through the application, please only use the back button within the application, not the back arrow within your browser.
Vendor Security Risk Assessment Team Lead
Posted today
Job Viewed
Job Description
Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.
Summary of This RoleEnsures the security posture of Global Payments through the security assessment, risk ranking, and continuous monitoring of critical vendor relationships. In this role you will help define efficient vendor assessment processes, identify and nurture partnerships both internal and external, and help coordinate vendor assessment activities. You will work closely with the Vendor Management Program Office (VMPO), Legal, Compliance, and Operations to provide cybersecurity expertise at vendor onboarding and throughout the vendor lifecycle.
What Part Will You Play?-
Serves as a subject matter expert for the assessment of vendors and recommendations for risk treatment of identified gaps.
Performs vendor security assessments.
Coaches team members on the vendor assessment process and helps guide them through challenges as needed.
Maintains and authors process documentation as required for existing processes or to define new processes to be implemented.
Engages in special projects as required to deliver writeups, reports, or assessment summaries.
Keeps up-to-date knowledge of new and emerging threats that can affect the organization's information assets by analyzing third party vendors and their respective infrastructure, policies, and best practices.
Coordinate with relevant departments to help ensure the information in the Third-party Risk Management (TPRM) tool remains current and up to date.
Respond to and process Threat intel alerts received from the TPRM tool through to resolution.
Manages communication from the Vendor Security Risk Program (VSRP) to our internal partners in the event of a vendor incident.
Assesses risks based on changes to implementation of NIST (National Institute of Standards and Technology, ISO (International Organization for Standardization)/BSO (Business Services Online); enhances knowledge of PCI (Payment Card Industry)/Logical Security guidelines and models, HIPPA (Health Insurance Portability and Accountability Act), PII (Personally Identifiable Information) , and Card personalization.
Enhances understanding of business objectives and helps provide direction based on risk, Corporate Security Policy, and association and regulatory guidelines.
Other duties as assigned.
Minimum Qualifications
Bachelor's Degree
Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field
Minimum 6 Years Relevant Experience
A proven track record of success assessing and monitoring the security posture of vendors.
Including network operations or engineering or system administration on Unix, Linux, MAC(Message Authentication Code), or Windows; proven experience working with security operations, intrusion detection systems, Security Incident Even Management systems, and anti-virus collection logs; including knowledge of industry standard security compliance programs ((PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act)), etc.). Knowledge of industry standard security compliance programs ((PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act), etc.)
Preferred Qualifications
Professional certifications CISSP (Certified Information System Security Professional), CISM (Certified Information Security Manager) , CISA (Certified-Information-Systems-Auditor), GSEC (GIAC Security Essentials , Network +, Security +
-
Soft Skills/Intrapersonal Skills - Exceptional verbal and written communication skills.
Ability to positively influence to effect change within the organization.
Ability to work within a team of exceptionally skilled individual contributors.
Skills / Knowledge - Having wide-ranging experience, uses professional concepts and company objectives to resolve complex issues in creative and effective ways.
Job Complexity - Works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Exercises judgment in selecting methods, techniques and evaluation criteria for obtaining results. Networks with key contacts outside their own area of expertise.
Supervision - Determines methods and procedures on new assignments and may coordinate activities of other personnel (Team Lead).
Risk Assessment - Ability to identify, communicate, and mitigate vendor security risk.
Industry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.
Incident Response - Knowledge and skills to contribute to all phases of Incident Response.
Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact
#J-18808-LjbffrSecurity Risk Assessment Analyst (Onsite Hybrid)

Posted today
Job Viewed
Job Description
We are currently seeking a **Security Risk Assessment Analyst (Onsite Hybrid)** to join our team in Montreal, Quebec (CA-QC), Canada (CA).
**Job Responsibilities Include:**
+ Contacting system owners/vendors for assigned systems to gather relevant background material about the system/application and setting up interviews for information gathering.
+ Conducting remote/in-person interviews with system owners/vendors to get all the required information for assessment and to identify any gaps.
+ Reviewing system-related material including specifications, diagrams, requirements, and test plans to ensure security-related standards are followed.
+ Reviewing results with system owners/vendors and Senior Security Architecture Analysts, as needed. - Conducting security assessments using available documentation.
+ Creating comprehensive security architecture assessment reports that clearly identify root-cause and remediation strategies.
+ Developing and establishing global security standards and processes.
+ Evaluating new and emerging products and technologies while making recommendations concerning the introduction of new technologies
**Basic Qualifications:**
+ 5+ years of experience in Security Architecture Assessment.
+ Bachelor's degree in Information Systems Security or Computer Science
**Preferred Skills:**
+ Minimum of one professional certification amongst CISSP, SSCP, and CISM with good standing will be an added advantage.
+ Excellent verbal and written communications skills, including presentations to clients and senior technical resources.
+ Ability to manage expectations and handle high-pressure situations with tight deadlines.
+ Experience in an information security (application and/or infrastructure) role in an enterprise environment.
+ Ability to explain common application vulnerabilities and remediation strategies to developers.
+ Ability to explain technology risks; including XSS, CSRF, Injection attacks introduced by application vulnerabilities to a system's Business Owner.
+ Ability to quickly adapt to changing priorities and demands.
+ Excellent security knowledge (access control) of one or more applicable security technologies or platforms including SSO (Single Sign-On) technologies like SAML2.0 and Kerberos.
+ Excellent knowledge of information security processes, response procedures, and various attack methods used for information theft or network intrusion.
+ Excellent analytical and problem-solving skills.
+ Excellent knowledge of network technologies as they pertain to communications, computer system environments, and related infrastructures.
+ Excellent research ability and knowledge update on the security trends and attacks, following OWASP top 10 security understanding.
#INDFSINS
#L1-NorthAmerica
**About NTT DATA**
NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com ( DATA endeavors to make_** **_ **_accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at_** **_ **_._** **_This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here ( . If you'd like more information on your EEO rights under the law, please click here ( . For Pay Transparency information, please click here ( ._**
Vendor Security Risk Assessment Team Lead
Posted today
Job Viewed
Job Description
Employer Industry: Payment Solutions
Why consider this job opportunity:
- Opportunity for career advancement and growth within the organization
- Work in a dynamic and innovative environment focused on cutting-edge payment technology
- Engage with a global team that supports over 3 million companies and 600 million cardholders
- Chance to enhance knowledge of cybersecurity and vendor risk management
- Contribute to the protection and security of critical information assets
What to Expect (Job Responsibilities):
- Serve as a subject matter expert for vendor assessments and risk treatment recommendations
- Perform vendor security assessments and maintain process documentation
- Coach team members on the vendor assessment process and provide guidance as needed
- Respond to and process Threat intel alerts from the Third-party Risk Management tool
- Manage communication regarding vendor incidents to internal partners
What is Required (Qualifications):
- Bachelors Degree in Computer Science, Information Security, or a related field
- Minimum of 6 years relevant experience in vendor security assessment and monitoring
- Proven track record of assessing and monitoring the security posture of vendors
- Experience with network operations, security operations, and intrusion detection systems
- Knowledge of industry standard security compliance programs such as PCI, SOX, and GLBA
How to Stand Out (Preferred Qualifications):
- Professional certifications such as CISSP, CISM, CISA, GSEC, Network +, or Security +
#PaymentSolutions #Cybersecurity #VendorManagement #CareerGrowth #RiskAssessment
We prioritize candidate privacy and champion equal-opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.
We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top-tier employer.
Cloud Security Risk Assessment Vice President

Posted 10 days ago
Job Viewed
Job Description
In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC Rail Services LLC, Manufacturers Bank, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
The anticipated salary range for this role is between $143,000.00 and $185,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees.
**Role Description**
SMBC is seeking a Cloud Security Risk Assessment Vice President who is experienced working in a Cloud Security Risk Program that includes running projects and BAU activity for assessing and reporting on risk and controls for Service Providers and their supporting tools. The Cloud Security Risk Assessment Vice President will be responsible for maintaining a program that will drive Cloud governance, security improvements, and efficiency across the Bank and the various group companies. He/she will lead efforts to continuously monitor Cloud Security Risks in a dynamic environment and will also lead projects related to information security risk management processes and system implementations. Additionally, the Cloud Security Risk Assessment Director will partner with various departments of the Bank on developing new risk management processes and ensure the roles and responsibilities are clearly defined among different teams.
**Role Objectives**
- Prioritize and complete internal and external risks assessments as required and negotiate with requesters on validity of the requests as needed.
- Partner with other risk departments of the bank to collaborate on BAU activities or projects and define clear roles and responsibilities on risk management processes, ensuring information security risks and controls throughout the bank are sufficiently assessed and managed.
- Complete independently or assign resources to various information security risk assessment activities such as self-assessments requested by clients and regulators, as needed.
- Fully understand Cloud security risk and controls and can simplify and articulate risk and controls to both technical and business stakeholders.
- Continuously enhance/streamline processes and technology in the Cloud security risk management space.
- Formally manage junior staff as direct reports.
- Function as an internal cloud security consultant on information security initiatives as assigned by the Executive Director and CISO.
- Function as SME to defend and advocate security controls.
PRIMARY RESPONSIBILITIES
- Communicate policy, procedure, and standard updates to stakeholders concisely and clearly.
- Clearly articulate security and technical controls and corresponding technical and operational risks to stakeholders
- Assess Cloud-based risks and controls against internal requirements, best practices, and industry frameworks.
- Ensure compliance with all policy and standard requirements applied to Cloud services and technology.
- Coordinate with various departments to ensure Cloud Security documentation requests are comprehensible and addressed timely.
- Serve as the Cloud Security SME and as a change agent to enable cloud transformation initiatives from a security perspective.
- Work closely with DevOps teams to assess practices for deploying new systems in the Cloud.
**Qualifications and Skills**
- Ability to lead complex tasks and technical projects and assign resources to complete the tasks timely.
- Have strong knowledge of cloud information security controls, risks and best practices in a large financial institution or banking environment.
- Have strong knowledge of cloud service providers (e.g., GCP, AWS, and AAD), cloud-based applications and tools (e.g., CASB), as well as the security controls that are unique to such solutions.
- Have strong knowledge of commonly used banking applications, operating systems, and databases.
- Have strong knowledge of cyber security regulations (e.g., NYS DFS Cybersecurity, GDPR, FCA) and information security best practices and industry frameworks (e.g., ISO27002, FFIEC, NIST, Cloud Security Alliance).
- Have working knowledge of various risk functions in large financial institutions, including how these risk functions relate to the management of information security risks.
- Have strong verbal and written communication skills.
**Additional Requirements**
D&I Commitment
Responsible for fostering a culture of diversity and inclusion, holding leaders accountable for creating an inclusive environment through awareness and practice of equity in recruiting, developing, and promoting diverse talent.
SMBC's employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SMBC provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application process, please let us know at
Sr. Analyst, IT Security Risk Assessment - Third Party

Posted today
Job Viewed
Job Description
**Work Arrangement:**
Remote : Work at home employee
**Relocation assistance:** is not available for this opportunity.
**Requisition #:** 74284
**The Role at a Glance**
This position will develop and conduct information security risk assessments on parties' external to Lincoln Financial Group to ensure that information security risks associated with those relationships are within acceptable tolerances. S/he will provide direction and guidance to stakeholders concerning risks associated with assessment findings and adherence to applicable procedures, regulations, and/or laws. S/he will respond to requests from external parties concerning Lincoln's own information risk management practices.
**What you'll be doing**
+ Maintains knowledge on current and emerging developments/trends for assigned area(s) of responsibility, assesses the impact, and collaborates with senior management to incorporate new trends and developments in current and future solutions.
+ Directs and enhances organizational initiatives by positively influencing and supporting change management and/or departmental/enterprise initiatives within assigned area(s) of responsibility.
+ Identifies and directs the implementation of process improvements that significantly improve quality across the team, department and/or business unit for his/her assigned area(s) of responsibility.
+ Provides subject matter expertise to team members and applicable internal/external stakeholders on complex assignments/projects for his/her assigned area(s) of responsibility.
+ Provides direction on complex assignments, projects, and/or initiatives to build and enhance the capability of his/her assigned area(s) of responsibility.
+ Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln's information security risk management requirements for the services to be provided.
+ Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
+ Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
+ Records pertinent documentation and communications for all assessments in Lincoln's online information technology (IT) governance, risk, and compliance platform.
+ Responds to incoming requests from external parties for information concerning Lincoln's information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner.
+ Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate.
+ Performs other information security risk management tasks as assigned.
+ Assists in creating and enforcing information security standards, policies and procedures.
+ Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
+ Evaluate and identify security risks of third-party AI solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices.
+ Stay updated on emerging AI trends and technologies to support innovation within the organization
+ Demonstrates understanding of AI
**What we're looking for**
+ 4 Year/Bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent experience in lieu of Bachelor's
+ 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position.
+ 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position.
**Application Deadline**
Applications for this position will be accepted through June 30, 2025, subject to earlier closure due to applicant volume.
**What's it like to work here?**
At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.
**What's in it for you:**
+ Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
+ Leadership development and virtual training opportunities
+ PTO/parental leave
+ Competitive 401K and employee benefits ( Free financial counseling, health coaching and employee assistance program
+ Tuition assistance program
+ Work arrangements that work for you
+ Effective productivity/technology tools and training
The pay range for this position is $93,300 - $169,700 with **anticipated pay for new hires between the minimum and midpoint of the range** and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.
**About The Company**
Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services.
With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.
Lincoln Financial Distributors, a broker-dealer, is the wholesale distribution organization of Lincoln Financial. Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.
Lincoln is committed to creating a diverse and inclusive ( environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Follow us on Facebook ( , X ( , LinkedIn ( , Instagram ( , and YouTube ( . For the latest company news, visit our newsroom ( .
**Be Aware of Fraudulent Recruiting Activities**
If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.
Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at if you encounter a recruiter or see a job opportunity that seems suspicious.
**Additional Information**
This position may be subject to Lincoln's Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln's current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.
Any unsolicited resumes or candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial are considered property of Lincoln Financial and are not subject to payment of agency fees.
Lincoln Financial is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling .
This Employer Participates in E-Verify. See the E-Verify ( notices.
Este Empleador Participa en E-Verify. Ver el E-Verify ( avisos.
Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.
Be The First To Know
About the latest Security professionals Jobs in United States !
Sr. Analyst, IT Security Risk Assessment - Third Party

Posted today
Job Viewed
Job Description
**Work Arrangement:**
Remote : Work at home employee
**Relocation assistance:** is not available for this opportunity.
**Requisition #:** 74284
**The Role at a Glance**
This position will develop and conduct information security risk assessments on parties' external to Lincoln Financial Group to ensure that information security risks associated with those relationships are within acceptable tolerances. S/he will provide direction and guidance to stakeholders concerning risks associated with assessment findings and adherence to applicable procedures, regulations, and/or laws. S/he will respond to requests from external parties concerning Lincoln's own information risk management practices.
**What you'll be doing**
+ Maintains knowledge on current and emerging developments/trends for assigned area(s) of responsibility, assesses the impact, and collaborates with senior management to incorporate new trends and developments in current and future solutions.
+ Directs and enhances organizational initiatives by positively influencing and supporting change management and/or departmental/enterprise initiatives within assigned area(s) of responsibility.
+ Identifies and directs the implementation of process improvements that significantly improve quality across the team, department and/or business unit for his/her assigned area(s) of responsibility.
+ Provides subject matter expertise to team members and applicable internal/external stakeholders on complex assignments/projects for his/her assigned area(s) of responsibility.
+ Provides direction on complex assignments, projects, and/or initiatives to build and enhance the capability of his/her assigned area(s) of responsibility.
+ Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln's information security risk management requirements for the services to be provided.
+ Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
+ Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
+ Records pertinent documentation and communications for all assessments in Lincoln's online information technology (IT) governance, risk, and compliance platform.
+ Responds to incoming requests from external parties for information concerning Lincoln's information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner.
+ Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate.
+ Performs other information security risk management tasks as assigned.
+ Assists in creating and enforcing information security standards, policies and procedures.
+ Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
+ Evaluate and identify security risks of third-party AI solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices.
+ Stay updated on emerging AI trends and technologies to support innovation within the organization
+ Demonstrates understanding of AI
**What we're looking for**
+ 4 Year/Bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent experience in lieu of Bachelor's
+ 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position.
+ 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position.
**Application Deadline**
Applications for this position will be accepted through June 30, 2025, subject to earlier closure due to applicant volume.
**What's it like to work here?**
At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.
**What's in it for you:**
+ Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
+ Leadership development and virtual training opportunities
+ PTO/parental leave
+ Competitive 401K and employee benefits ( Free financial counseling, health coaching and employee assistance program
+ Tuition assistance program
+ Work arrangements that work for you
+ Effective productivity/technology tools and training
The pay range for this position is $93,300 - $169,700 with **anticipated pay for new hires between the minimum and midpoint of the range** and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.
**About The Company**
Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services.
With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.
Lincoln Financial Distributors, a broker-dealer, is the wholesale distribution organization of Lincoln Financial. Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.
Lincoln is committed to creating a diverse and inclusive ( environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Follow us on Facebook ( , X ( , LinkedIn ( , Instagram ( , and YouTube ( . For the latest company news, visit our newsroom ( .
**Be Aware of Fraudulent Recruiting Activities**
If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.
Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at if you encounter a recruiter or see a job opportunity that seems suspicious.
**Additional Information**
This position may be subject to Lincoln's Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln's current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.
Any unsolicited resumes or candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial are considered property of Lincoln Financial and are not subject to payment of agency fees.
Lincoln Financial is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling .
This Employer Participates in E-Verify. See the E-Verify ( notices.
Este Empleador Participa en E-Verify. Ver el E-Verify ( avisos.
Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.
Sr. Analyst, IT Security Risk Assessment - Third Party

Posted today
Job Viewed
Job Description
**Work Arrangement:**
Remote : Work at home employee
**Relocation assistance:** is not available for this opportunity.
**Requisition #:** 74284
**The Role at a Glance**
This position will develop and conduct information security risk assessments on parties' external to Lincoln Financial Group to ensure that information security risks associated with those relationships are within acceptable tolerances. S/he will provide direction and guidance to stakeholders concerning risks associated with assessment findings and adherence to applicable procedures, regulations, and/or laws. S/he will respond to requests from external parties concerning Lincoln's own information risk management practices.
**What you'll be doing**
+ Maintains knowledge on current and emerging developments/trends for assigned area(s) of responsibility, assesses the impact, and collaborates with senior management to incorporate new trends and developments in current and future solutions.
+ Directs and enhances organizational initiatives by positively influencing and supporting change management and/or departmental/enterprise initiatives within assigned area(s) of responsibility.
+ Identifies and directs the implementation of process improvements that significantly improve quality across the team, department and/or business unit for his/her assigned area(s) of responsibility.
+ Provides subject matter expertise to team members and applicable internal/external stakeholders on complex assignments/projects for his/her assigned area(s) of responsibility.
+ Provides direction on complex assignments, projects, and/or initiatives to build and enhance the capability of his/her assigned area(s) of responsibility.
+ Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln's information security risk management requirements for the services to be provided.
+ Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
+ Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
+ Records pertinent documentation and communications for all assessments in Lincoln's online information technology (IT) governance, risk, and compliance platform.
+ Responds to incoming requests from external parties for information concerning Lincoln's information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner.
+ Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate.
+ Performs other information security risk management tasks as assigned.
+ Assists in creating and enforcing information security standards, policies and procedures.
+ Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
+ Evaluate and identify security risks of third-party AI solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices.
+ Stay updated on emerging AI trends and technologies to support innovation within the organization
+ Demonstrates understanding of AI
**What we're looking for**
+ 4 Year/Bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent experience in lieu of Bachelor's
+ 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position.
+ 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position.
**Application Deadline**
Applications for this position will be accepted through June 30, 2025, subject to earlier closure due to applicant volume.
**What's it like to work here?**
At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.
**What's in it for you:**
+ Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
+ Leadership development and virtual training opportunities
+ PTO/parental leave
+ Competitive 401K and employee benefits ( Free financial counseling, health coaching and employee assistance program
+ Tuition assistance program
+ Work arrangements that work for you
+ Effective productivity/technology tools and training
The pay range for this position is $93,300 - $169,700 with **anticipated pay for new hires between the minimum and midpoint of the range** and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.
**About The Company**
Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services.
With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.
Lincoln Financial Distributors, a broker-dealer, is the wholesale distribution organization of Lincoln Financial. Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.
Lincoln is committed to creating a diverse and inclusive ( environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Follow us on Facebook ( , X ( , LinkedIn ( , Instagram ( , and YouTube ( . For the latest company news, visit our newsroom ( .
**Be Aware of Fraudulent Recruiting Activities**
If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.
Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at if you encounter a recruiter or see a job opportunity that seems suspicious.
**Additional Information**
This position may be subject to Lincoln's Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln's current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.
Any unsolicited resumes or candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial are considered property of Lincoln Financial and are not subject to payment of agency fees.
Lincoln Financial is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling .
This Employer Participates in E-Verify. See the E-Verify ( notices.
Este Empleador Participa en E-Verify. Ver el E-Verify ( avisos.
Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.
Sr. Analyst, IT Security Risk Assessment - Third Party

Posted today
Job Viewed
Job Description
**Work Arrangement:**
Remote : Work at home employee
**Relocation assistance:** is not available for this opportunity.
**Requisition #:** 74284
**The Role at a Glance**
This position will develop and conduct information security risk assessments on parties' external to Lincoln Financial Group to ensure that information security risks associated with those relationships are within acceptable tolerances. S/he will provide direction and guidance to stakeholders concerning risks associated with assessment findings and adherence to applicable procedures, regulations, and/or laws. S/he will respond to requests from external parties concerning Lincoln's own information risk management practices.
**What you'll be doing**
+ Maintains knowledge on current and emerging developments/trends for assigned area(s) of responsibility, assesses the impact, and collaborates with senior management to incorporate new trends and developments in current and future solutions.
+ Directs and enhances organizational initiatives by positively influencing and supporting change management and/or departmental/enterprise initiatives within assigned area(s) of responsibility.
+ Identifies and directs the implementation of process improvements that significantly improve quality across the team, department and/or business unit for his/her assigned area(s) of responsibility.
+ Provides subject matter expertise to team members and applicable internal/external stakeholders on complex assignments/projects for his/her assigned area(s) of responsibility.
+ Provides direction on complex assignments, projects, and/or initiatives to build and enhance the capability of his/her assigned area(s) of responsibility.
+ Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln's information security risk management requirements for the services to be provided.
+ Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
+ Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
+ Records pertinent documentation and communications for all assessments in Lincoln's online information technology (IT) governance, risk, and compliance platform.
+ Responds to incoming requests from external parties for information concerning Lincoln's information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner.
+ Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate.
+ Performs other information security risk management tasks as assigned.
+ Assists in creating and enforcing information security standards, policies and procedures.
+ Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
+ Evaluate and identify security risks of third-party AI solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices.
+ Stay updated on emerging AI trends and technologies to support innovation within the organization
+ Demonstrates understanding of AI
**What we're looking for**
+ 4 Year/Bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent experience in lieu of Bachelor's
+ 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position.
+ 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position.
**Application Deadline**
Applications for this position will be accepted through June 30, 2025, subject to earlier closure due to applicant volume.
**What's it like to work here?**
At Lincoln Financial, we love what we do. We make meaningful contributions each and every day to empower our customers to take charge of their lives. Working alongside dedicated and talented colleagues, we build fulfilling careers and stronger communities through a company that values our unique perspectives, insights and contributions and invests in programs that empower each of us to take charge of our own future.
**What's in it for you:**
+ Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
+ Leadership development and virtual training opportunities
+ PTO/parental leave
+ Competitive 401K and employee benefits ( Free financial counseling, health coaching and employee assistance program
+ Tuition assistance program
+ Work arrangements that work for you
+ Effective productivity/technology tools and training
The pay range for this position is $93,300 - $169,700 with **anticipated pay for new hires between the minimum and midpoint of the range** and could vary above and below the listed range as permitted by applicable law. Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications required for the role. The base pay is just one component of Lincoln's total rewards package for employees. In addition, the role may be eligible for the Annual Incentive Program, which is discretionary and based on the performance of the company, business unit and individual. Other rewards may include long-term incentives, sales incentives and Lincoln's standard benefits package.
**About The Company**
Lincoln Financial (NYSE: LNC) helps people to confidently plan for their version of a successful future. We focus on identifying a clear path to financial security, with products including annuities, life insurance, group protection, and retirement plan services.
With our 120-year track record of expertise and integrity, millions of customers trust our solutions and service to help put their goals in reach.
Lincoln Financial Distributors, a broker-dealer, is the wholesale distribution organization of Lincoln Financial. Lincoln Financial is the marketing name for Lincoln Financial Corporation and its affiliates including The Lincoln National Life Insurance Company, Fort Wayne, IN, and Lincoln Life & Annuity Company of New York, Syracuse, NY. Lincoln Financial affiliates, their distributors, and their respective employees, representatives and/or insurance agents do not provide tax, accounting or legal advice.
Lincoln is committed to creating a diverse and inclusive ( environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Follow us on Facebook ( , X ( , LinkedIn ( , Instagram ( , and YouTube ( . For the latest company news, visit our newsroom ( .
**Be Aware of Fraudulent Recruiting Activities**
If you are interested in a career at Lincoln, we encourage you to review our current openings and apply on our website. Lincoln values the privacy and security of every applicant and urges all applicants to diligently protect their sensitive personal information from scams targeting job seekers. These scams can take many forms including fake employment applications, bogus interviews and falsified offer letters.
Lincoln will not ask applicants to provide their social security numbers, date of birth, bank account information or other sensitive information in job applications. Additionally, our recruiters do not communicate with applicants through free e-mail accounts (Gmail, Yahoo, Hotmail) or conduct interviews utilizing video chat rooms. We will never ask applicants to provide payment during the hiring process or extend an offer without conducting a phone, live video or in-person interview. Please contact Lincoln's fraud team at if you encounter a recruiter or see a job opportunity that seems suspicious.
**Additional Information**
This position may be subject to Lincoln's Political Contribution Policy. An offer of employment may be contingent upon disclosing to Lincoln the details of certain political contributions. Lincoln may decline to extend an offer or terminate employment for this role if it determines political contributions made could have an adverse impact on Lincoln's current or future business interests, misrepresentations were made, or for failure to fully disclose applicable political contributions and or fundraising activities.
Any unsolicited resumes or candidate profiles submitted through our web site or to personal e-mail accounts of employees of Lincoln Financial are considered property of Lincoln Financial and are not subject to payment of agency fees.
Lincoln Financial is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, Veteran status, or genetic information. Applicants are evaluated on the basis of job qualifications. If you are a person with a disability that impedes your ability to express your interest for a position through our online application process, or require TTY/TDD assistance, contact us by calling .
This Employer Participates in E-Verify. See the E-Verify ( notices.
Este Empleador Participa en E-Verify. Ver el E-Verify ( avisos.
Lincoln Financial Group ("LFG") is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual orientation, gender identity and expression, veterans status, or genetic information. Opportunities throughout LFG are available to employees and applicants and are evaluated on the basis of job qualifications. We have a drug free work environment and we perform pre-employment substance abuse testing.