Fidelity Investments Hiring for TECHNOLOGY RISK ANALYST (GR. 4) Job at Merrimack, NH Full Time

Job Description:

The Role

The ECS Internal Audit Engagement (IAE) team is seeking an experienced cybersecurity risk professional to support and partner with all ECS Product Areas and Fidelity’s Corporate Audit and Enterprise Tech Risk functions. The role supports ECS’s goal of cyber risk reduction and requires steadfast engagement and partnership with ECS Product Areas and Audit. From pre-Audit control assessment and gap analysis, through Audit fieldwork and understanding Audit observations, tracking of ECS remediation and ultimate closure of issues, the IAE team member must strike a balance between appropriately prioritizing ECS Product Area responses and ensuring Audit’s observations are addressed.

The Expertise and Skills You Bring

Technical Skills

• Risk Assessment (Critical)
• Process and Controls Assessments (Critical)
• Operations & Technology – Identity & access management; physical/personnel security; security ops assessments.
• Information Risk Management – Vendor risk management and security; cyber threat analysis and risk management; cloud computer security; data classification, protection and encryption.
• Legal and Compliance – Regulatory considerations.
• Business Continuity and Crisis Management
• Secure Software Development Life Cycle (SSDLC) and application security.
• Knowledge of cybersecurity threats and tactics (Required)
• Risk Management and Mitigation (Required)
• Familiarity with ECS Policies, Standards, and Technical Implementation Guides (TIGs) (Required)
• Ability to understand cloud and on-prem architecture and system diagrams (Required)
• Requirements Gathering and Analysis (Required)
• Knowledge of Agile methodology (Required)
• Microsoft Products (Required)
• Project Management (Nice to Have)
• Familiarity with Archer GRC, Jira, and ServiceNOW (Nice to have)

General Business Skills

• Experience working as a Corporate/Internal Auditor or working with a Corporate Audit function.
• Understanding of NIST Cybersecurity Framework core standards and practices, COBIT 5 for Risk, and FAIR risk management framework.
• Experience within a Cyber Security organization/culture (vulnerabilities and attacks, systems at risk, defenses/countermeasures, policies, etc.).
• Investigator/analyst mindset to deep dive into Audit findings to understand and communicate material risks and appropriate responses.
• Communication: Excellent written, verbal, presentation, negotiation, and meeting facilitation skills.
• Ability to collaborate with team members and work across ECS to address risks.
• Ability to conduct independent research.
• Strong problem-identification and problem-solving skills.
• Initiative / Passion for Technology.
• Ability to work efficiently in a fast-paced environment with competing priorities.

The Team

The Enterprise Cybersecurity (ECS) Regulatory & Audit team helps ECS and corporate partners manage firm-wide cybersecurity risk by providing key support services. Part of Cyber Regulatory & Audit is the ECS Internal Audit Engagement (IAE) team which supports 40-50 internal audits annually. IAE seeks to reduce cyber risk through improved collaboration and purposeful engagement and partnership with ECS Product Areas and Audit to facilitate alignment, transparency, and efficiency. IAE services supporting these goals include: Pre-audit control risk/gap assessments; Audit PoV issue and action plan (AP) support; drafting ECS APs in partnership with ECS Product Areas and Audit; Initiating and tracking Policy Violations and Risk Acceptances (RA); Ensuring ECS and Audit system of record (e.g., GRC Archer, TeamMate+) alignment; Tracking and reporting status/health of open APs, RAs; Facilitating AP closure in GRC to ensure on-time compliance; Performing Audit Theme and Trend Analyses; and providing key ECS audit metrics and reporting.

Certifications:

Company Overview

Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money.

Join Us

At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a Best Place to Work in 2022. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined.

At Fidelity, our goal is for most people to work flexibly in a way that balances both personal and business needs with time onsite and offsite through what we’re calling “Dynamic Working.”

We invite you to Find Your Fidelity at fidelitycareers.com.

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to accommodations @fmr.com, or by calling 800-835-5099, prompt 2, option 3.

We welcome those with experience in jobs such as Software Developer, Computer Technician, and Computer User Support Specialist and others in the Computers and Technology to apply.