Third Party Cybersecurity Risk Management Manager

Company: OneMain Financial
Location: Evansville
Posted on: February 25, 2021

Job Description:

This position will be responsible for leading the Third Party Cybersecurity Risk Management program and ensuring proper due diligence is performed. The ideal candidate will provide leadership, oversight and management of the Third-Party Cyber Security Risk Management Program, including: Manage, enhance and implement policies, procedures and program governance to ensure effective cybersecurity risk management of third parties in accordance with internal and regulatory requirements Serve as internal point-of-contact and ensure that the appropriate cybersecurity controls are embedded throughout the third-party management lifecycle (due diligence; onboarding; monitoring; issue management and escalation; termination) Define third party cybersecurity standards and contractual requirements for OneMain Oversee and/or directly perform remote and on-site assessments Manage identified third party cybersecurity findings and assist in identifying appropriate controls to mitigate cybersecurity gaps as well as managing them to closure Develop standardized reporting to enable continuous monitoring against program goals Engage with the organization and help develop procedures for team members about third party cyber security risks Other duties as required (e.g. regulatory/audit support, metrics/reporting) Minimum Qualifications Bachelor?s degree or equivalent work experience Previous experience leading teams Possess strong analytical skills with the ability to think critically and question the information gathered. Strong communication skills, especially in the area of writing will be needed as the individual will need to create reports on their findings. Experience/knowledge of SOC reports, ISO certification, PCI report of compliance and other independent attestation report for service providers is preferred. Experience working with industry frameworks such as CIS Top 20, NIST 800-30, ISO 27002 Knowledge of Gramm Leach Bliley Act (GLBA), Federal Trade Commission (FTC) requirements and guidelines, the New York Department of Financial Services 23 NYCRR 500 Regulation ("NYDFS"), the California Consumer Protection Act ("CCPA"), Payment Card Industry Data Security Standards (?PCI DSS?) Required Knowledge and Skills Demonstrate program and team leadership experience Understands complex cybersecurity issues as well as emerging technologies and develop creative solutions while ensuring compliance with cybersecurity laws and regulations. These laws include Gramm Leach Bliley Act (GLBA), Federal Trade Commission (FTC) requirements and guidelines, the New York Department of Financial Services 23 NYCRR 500 Regulation ("NYDFS"), the California Consumer Protection Act ("CCPA"), Payment Card Industry Data Security Standards (?PCI DSS?), among others. Strong business acumen and strategic thinking skills to enable understanding of third party risks in context of business activities Ability to problem solve and identify solutions to third party issues that are appropriate based on business context and risk significance Experience with leading remote and on-site third party assessments and/or contract audits Ability to adapt to change quickly and manage multiple tasks successfully Passion for working collaboratively and cross-functionally with strong commitment to customer service, stakeholder relationships, and high impact communications across all organizational levels Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Benefits: Because we want our team members to bring us their very best every day, we believe they deserve the right opportunities and benefits. That?s why we packed our comprehensive benefits package for full- and some part-timers with: Health and wellbeing options for team members and their dependents Up to 4% matching 401(k) Tuition reimbursement Continuing education Bonus eligible Paid time off Paid volunteer time And more Our Company: OneMain Financial is the country?s largest lending-exclusive financial company, proudly serving millions of customers with safe, affordable and transparent installment loans. Our customers turn to us every day?online and at 1,500 branches in 44 states?to help them take control and improve their financial lives with solutions for debt consolidation, medical expenses, household bills, home improvements and auto purchases. Our talented and dedicated team members constantly look for responsible ways to serve our customers when, where and how they want. It?s all about doing the right thing?a mission that hasn?t changed for more than 100 years. #LI-DB1

Keywords: OneMain Financial, Evansville , Third Party Cybersecurity Risk Management Manager, Executive , Evansville, Indiana