Information Technology Enterprise Risk Manager (Cybersecurity)

Location: Pittsburgh, Pennsylvania, United States; onsite role

Company

hirify.global is a financial institution with an enterprise risk management organization supporting technology, information security, data, and regulatory risk oversight.

What you will do

• Oversee technology-related Risk and Control Self-Assessments and challenge RCSA conclusions and monitoring routines.
• Independently assess risks, identify root causes of residual operational risk, and drive corrective actions.
• Validate first-line control testing and independently test IT, information security, and data controls.
• Partner with IT, information security, and data teams to mature risk assessments, document controls, identify gaps, and develop action plans.
• Support GLBA, authentication and access, PCI DSS, and HIPAA assessments, including challenge of methodologies and results.
• Monitor issue remediation, technology exceptions, resilience testing, vulnerability management, technology failures, policies, standards, and risk metrics.

Requirements

• Bachelor's degree in Management Information Systems, Cybersecurity, or Business Administration.
• 8–12 years of cybersecurity or information technology experience.
• 6–8 years of prior financial institution experience.
• Deep knowledge of information technology, information security, data principles, risk management methodologies, frameworks, and RCSA execution.
• Knowledge of NIST CSF, GLBA, PCI DSS, and HIPAA compliance requirements.
• Experience with vulnerability scanning and penetration testing tools, plus strong analytical, problem-solving, communication, and reporting skills.

Nice to have

• ITIL certification.
• Certified Information Systems Auditor, CISM, CRISC, or CISSP certification.

Culture & Benefits

• Work within the Risk Management organization and collaborate with IT, information security, data, and first-line business teams.
• Support compliance with corporate policies and Federal and State regulations.
• Use Microsoft Office and department-specific applications to improve efficiency.
• Work as part of a team and with on-site equipment.
• Northwest is an equal opportunity employer committed to an inclusive work environment.