Specialist, IT and Cyber Risk Assessment

Alternate Locations: Work from Home; Charlotte, NC (North Carolina); Fort Wayne, IN (Indiana); Greensboro, NC (North Carolina); Radnor, PA (Pennsylvania)     Work Arrangement: Remote : Work at home employee residing outside of a commutable distance to an office location.   Relocation assistance:   is not available for this opportunity.   Requisition #:  76365   The Role at a Glance

As an IT & Cyer Risk Assessment Specialist, you will apply functional knowledge related to identifying, assessing, reporting and mitigating IT and Cyber risk for the enterprise. You will proactively collaborate with business and technology leadership and other stakeholders to develop, recommend, and implement mitigation solutions. You will support the develop of measures to monitor effectiveness and progress of risk mitigation approaches. What you'll be doing

Maintains knowledge of current and emerging information security trends, threats, technologies, regulatory requirements, industry best practices, and AI-related risks applicable to assigned areas of responsibility. Supports departmental and enterprise initiatives by contributing to change management efforts, team objectives, and continuous improvement activities. Performs information security risk management activities and delivers on assigned projects while building expertise within assigned areas of responsibility. Identifies opportunities for process improvements that enhance efficiency, consistency, and quality and communicates recommendations to management. Conducts information security risk assessments of third-party vendors by reviewing security questionnaires, audit reports, control documentation, and other supporting evidence. Evaluates assessment results and assists in determining third-party information security risk profiles using established methodologies, company policies, and industry standards. Develops recommendations to address identified security gaps and collaborates with internal stakeholders and external parties to support risk mitigation and remediation efforts. Documents assessment activities, findings, recommendations, and communications within approved governance, risk, and compliance platforms. Responds to requests regarding the organization's information security practices by providing accurate, approved, and professionally written information. Partners with business stakeholders, risk functions, and other teams across the enterprise to support risk assessment activities, remediation tracking, and risk management efforts. Collects, maintains, and analyzes assessment and risk management data to support program oversight, reporting, and decision-making. Assists in the preparation of metrics, dashboards, reports, and presentations that communicate assessment results, risk trends, remediation progress, and program performance to stakeholders and leadership. Identifies trends, reporting opportunities, and data quality improvements to support continuous improvement efforts and informed decision-making. Applies critical thinking to analyze and synthesize information from multiple sources, including security questionnaires, audit reports, assessment evidence, policies, standards, and stakeholder discussions, to develop clear findings, recommendations, and reporting. Communicates effectively through both written and verbal channels, tailoring messages, reports, and presentations to technical, business, and leadership audiences. Assists in the development, maintenance, and implementation of information security standards, policies, procedures, and related documentation. Evaluates security considerations associated with third-party AI solutions and provides input based on established policies, standards, and industry best practices. Demonstrates curiosity and a willingness to learn emerging technologies, including AI, and explores opportunities to improve team processes, reporting, and analysis capabilities.