Enable America Jobs

JOB REQUIREMENTS: JOB ID: 21025 POSITION SUMMARY This position is responsible for supporting our third-party risk management program, which is designed to assess the cybersecurity risk of third parties and their solutions and make informed recommendations for the secure adoption of services and technologies. Primary responsibilities for this position include completing risk assessments of third-party service engagements, improving utilization and maximizing value of current IT Risk Management toolsets, maintaining a common repository of reviewed solutions, and working with stakeholders to socialize and mature third-party risk management processes at their respective universities. The incumbent in this position also assists in advancing the effectiveness of operations and proactively identify new strategies that contribute to success of the program. This position reports to the Director of Information Security Governance, Risk, and Compliance. MAJOR RESPONSIBILITIES Operational Risk Management -Conduct risk assessments of third-party service engagements to evaluate the cybersecurity risk a university may encounter when working with or using a third-party solution or service -Evaluate the design of key controls identified and provide control enhancement recommendations as appropriate -Develop formal written assessment reports -Develop relationships with both technical and functional units and assist in improving risk culture throughout the organization -Contribute to other risk management activities, which may include monitoring and tracking identified risks and other special projects as needed WORK LOCATION Telecommuting or hybrid work options may be available. Some travel to Madison and campuses around the state may be required. Preference will be given to candidates that reside within the state of Wisconsin. Telecommuting agreements are subject to change at any time. APPLICATION INSTRUCTIONS To ensure full consideration, please submit application materials as soon as possible. Applicant screening will begin immediately and be ongoing through 11:59 pm, Sunday, July 14, 2024 However, applications may be accepted until the position has been filled. 1. Go to the UWSA Applicant Portal to submit your materials online and select the appropriate applicant portal, either External Applicants or Internal Applicants and click on the position title that you want to apply for. 2. To receive full consideration, interested applicants are required to apply online and provide: -Resume (PDF Format) - Cover letter addressing your experience and education as it applies to all minimum and preferred qualifications (PDF Format) Failing to submit the required application documents may disqualify your application. 3. Submit your application. SPECIAL NOTES: If you need to request an accommodation because of a disability, you can find information about how to make a request by contacting Sarah Wilson, HR Business Partner, at sarah.wilson@uwss.wisconsin.edu. The Universities of Wisconsin will not reveal the identities of applicants who request confidentiality in writing, except that the identity of the successful candidate will be released. See Wis. Stat. . 19.36(7). Qualified applicants will receive consideration for employment without regard to, including but not limited to, race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, disability, or status as a protected veteran, and other bases as defined by federal regulations and UW System policies. We promote excellent through diversity and encourage all qualified individuals to apply. Questions may be addressed to: Sarah Wilson, HR Business Partner, at sarah.wilson@uwss.wisconsin.edu. ***** OTHER EXPERIENCE AND QUALIFICATIONS: MINIMUM QUALIFICATIONS -Prior Third Party Risk Management, Audit, or Enterprise Risk Management experience -Comprehensive knowledge of Third Party Risk Management processes an methodologies -Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with all levels of staff and leadership PREFERRED QUALIFICATIONS -Bachelor\'s degree -Experience conducting risk assessments against specific industry standards and regulations affecting the higher education environment such as NIST Standards and Frameworks, FERPA, GLBA, and HIPAA -Experience with OneTrusts IT & Security Risk Management solution CISSP, CRISC, CISA or related professional certification ***** APPLICATION INSTRUCTIONS: Apply Online: www.careers.wisconsin.edu