IT Risk Manager bei Mouser Electronics
Mouser Electronics · Mansfield, Vereinigte Staaten Von Amerika · Hybrid
- Senior
- Optionales Büro in Mansfield
ACCOUNTABILITIES & ESSENTIAL FUNCTIONS
• Educate and champion Information Security and privacy practices and frameworks.
• Establish information security and compliance goals: assist in defining security strategies, metrics,
reporting mechanisms and program services; create maturity models and a roadmap for continual
program improvements.
• Manage creation and maintenance of auditing, control assessments, policy/standard/procedure
writing, and implementation.
• Oversee enforcement of policies, standards, procedures, and associated controls.
• Evaluate new technologies and changes to existing systems to validate compliance with security
and privacy requirements.
• Coordinate Risk Assessments, effectively communicate the results, and lead appropriate actions
to mitigate the identified risks.
• Validate compliance to PCI DSS, SOX 404, ISO, and OFAC regulatory bodies and requirements.
• Validate compliance to GDPR, CCPA, PIPL, and other applicable privacy laws.
• Manage teams that routinely audit Mouser Electronics policies, standards, and processes.
• Perform training/information sharing sessions as needed to Mouser employees.
• Educate internal customers to make informed risk decisions and develop acceptable risk
mitigation strategies.
• Lead external and internal audits, security review and planning activities, and Business Continuity
activities.
• Align Risk Management processes into business organization and strategies.
• Produce status reports in writing and verbalize the results of all assessments to management, as
needed.
• Generate succinct and actionable reporting to Risk Owners that provides a current status on all
open issues, including remediation plans and/or exception requests.
• Manage resources to successfully meet team SLAs and project deliverables.
• Evaluate new processes and software designed for the technology GRC Program and make
recommendations that advance the overall program.
• Participate in addressing security breaches and vulnerability issues in a timely fashion and be an
active participant in the incident response processes.
• Maintain audit results and corresponding data to quickly respond to requests for information from
internal or external auditors.
• Lead technical and business teams through audit requirements, findings, and timelines, keeping
stakeholders informed of progress or obstacles.
• Develops and maintains a productive work teams by hiring qualified personnel, training, and
managing performance.
• Manages teams with integrity, ethical business practices, and in accordance with Mouser policies,
procedures, and practices.
• Customarily and regularly directs the work of two or more full-time employees or their equivalent.
Makes suggestions and recommendation for these employees regarding performance, including
hiring, transfer, advancement, and termination.
• Manages daily operations to meet department and company objectives.
• Works with minimum supervision and makes independent judgments.
• Flexible to meet the changing needs of the business and willingness to take on new
responsibilities and assignments.
• Initiates, establishes and maintains highly effective relationships with internal and external
business contacts of various cultures, and at all levels.
• Extremely confidential and trustworthy.
• Demonstrates knowledge, experience and understanding of critical job function of the team and
people management.
• Assists management with development of results oriented strategies.
• Regular attendance at work is an essential part of the job.
SKILLS & CERTIFICATIONS
• Proficient in use of Microsoft Office Products.
• Strong background and experience with audit methodologies and techniques.
• Understanding of common networking and security hardware and software environments, security
alerts and issues, protocols, standards, and trends.
• Understanding of CobiT, ISO 27001/27002, PCI DSS, SOX 404 frameworks.
• Strong understanding of GDPR, CCPA, PIPL and other privacy laws.
• ISO documentation like SOA, Risk Assessment and Risk Treatment.
• Two or more of the following certifications (CISA, CISM, CRISC, CISSP, GIAC, GSEC, CGEIT, or
other Information Security/IT Audit discipline).
EDUCATION & EXPERIENCE
• Bachelor’s Degree in any field, or minimum of 3 years prior work experience that is relevant to the
team you will manage. Including:
• Internal candidates: Minimum 2 years as a highly performing Mouser Team Lead or Supervisor.
• External candidates: Minimum 3 years as a supervisor or higher-level management position