IT Risk Management Analyst

Company
Federal Reserve Bank of Chicago
When you join the Federal Reserve—the nation's central bank—you'll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We dedicate more than $1 billion to technology each year to support the Federal Reserve and our economy, and we're building a dynamic and diverse team for our future.
The IS Risk Management Analyst will be involved with the Federal Reserve System risk evaluation processes by both working with internal departments as well as external 3rd party IT vendors. Responsible for performing a variety of risk evaluation and management functions to ensure high quality information security controls are in place throughout the Federal Reserve Bank's on premises and cloud-based information technology environment. Maintains relationships with business areas that interact with IS Governance processes in a moderately complex manner on a regular basis.
Responsibilities

• Identifies needs and develops/implements technology related controls for internal departments
• Assesses internal control performance, identifies weaknesses, and provides recommendations to strengthen the control environment
• Assists in ensuring consistency in the testing process and reporting of results
• Leads departments through the risk evaluation process
• Provides project management of new security initiatives that affect IS or IS Risk Management
• Develops or updates procedure documents
• Tracks and verifies adherence to information security polices procedures and requirements
• Researches and prepares reports on compliance obligations and issues
• Understands both traditional on-premises as well as cloud-based information systems (e.g., IaaS, SaaS) and their associated risks
• Partners with business areas in support of IS Risk Management processes
• Collaborates with other members of the IS Policy & Risk Assessment team on complex matters
• Participates in department projects that focus on IS Policy & Risk Assessment process improvement

Your Background

• Bachelor`s Degree in business, information technology, or other related field or equivalent work experience
• 3+ years of experience in risk management, audit or information security
• Communicate risk and compliance subjects to multiple audiences, including technicians, businesspersons and management
• Familiarity with common information security frameworks, including for cloud-based systems (NIST/FedRAMP)
• Possession of industry certifications, such as CISSP, CBCP, preferred
• Certifications such as CCSP, AWS cloud practitioner, and others are beneficial but not requirements

What we offer

• Comprehensive benefits package includes medical, dental, vision, prescription drug coverage, 401k savings plan, retirement plan, paid time off, transit benefit, onsite gym and subsidized cafeteria

Requirements

• Applicants must be authorized to work in the United States without the need for visa sponsorship now or in the future.
• All Federal Reserve Bank of Chicago employees must be fully vaccinated against COVID-19, and receive a booster shot within 30 days of being eligible to do so, unless the Bank grants an accommodation based on medical condition or sincerely held religious belief.
• As a condition of employment, Federal Reserve Bank of Chicago employees must comply with the Bank's ethics rules, which generally prohibit employees, their spouses/domestic partners, and minor children from owning securities, such as stock, of banks or savings associations or their affiliates, such as bank holding companies and savings and loan holding companies. If you or your spouse/domestic partner or minor child own such securities, and would not be willing or able to divest them if you accepted an offer of Bank employment, you should raise this issue with the recruiter for this posting, who can provide you contact information for our ethics official if necessary.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender, gender identity or expression, or veteran status.
Full Time / Part Time
Full time
Regular / Temporary
Regular
Job Exempt (Yes / No)
Yes
Job Category
Information Technology
Work Shift
First (United States of America)
The Federal Reserve Banks believe that diversity and inclusion among our employees is critical to our success as an organization, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.
Privacy Notice