Risk Manager - Engineering - CRO

Details

Bloomberg’s Chief Risk Office (CRO) Department supports businesses and operations around the world by addressing risks inherent with being the world’s leading financial news and information company. The CRO team provides centralized risk frameworks, processes, tools, training, and advisory services, and is responsible for risk reporting to firm-wide partners and senior management.

Responsibilities

• Monitor and analyze risks within Engineering areas, applying good judgement when evaluating both the risk and controls framework
• Work closely with Engineering stakeholders to conduct in-depth analysis of key processes, which may include documentation of process flows, policy & procedure review, and stakeholder interviews
• Operate as an educator and partner by facilitating First Line of Defense (FLOD) risk execution and partnering on Risk Control Self-Assessment (RCSA) training efforts
• Successfully challenge FLOD on the identification and mitigation of risks, and the adequacy of controls
• Socialize gaps resulting from risk assessments with relevant colleagues and assist with remediation of gaps
• Support the design and build of an enhanced RCSA process including enhanced data collection and reporting
• Monitor and analyze risk data and metrics to identify trends, patterns, and areas for improvement
• Collaborate with cross functional teams to implement risk mitigation measures
• Provide subject matter expertise and knowledge of relevant risk trends
• Ensure the integrity, completeness, accuracy, and timeliness of risk data, in addition to driving risk programs
• Stay informed on risk industry and educational/development opportunities
• Use Governance Risk and Compliance (GRC) tools to evidence risk management, monitoring, measurement, and reporting within the division
• Follow up on gaps, incidents and remediation plans that require actions for respective business units

Requirements

• 6-7 years experience in risk management with a focus in technology risk management
• Bachelor’s Degree or higher in Information Systems, Computer Science or related discipline
• Experience in risk management, audit or compliance related to technology risk or cyber security
• Good understanding of all aspects of technology infrastructure, application operations and control
• Great collaboration skills to guide organizational change and partner with both senior management and staff
• Proven intellectual curiosity through professional training, advanced degree or professional impact
• Understanding of industry best practices like NIST, CSF or CIS and other risk management frameworks, such as COSO
• Prior experience in either a 1st or 2nd line of defense capacity
• Self-starter, with the ability to work independently with guidance and a positive work attitude
• Excellent time management skills and ability to deliver work on assigned schedules
• Strong analytical and problem-solving skills to act decisively and independently to resolve sophisticated issues
• Excellent oral and written communication skills and efficiency of operating across a multitude of levels
• Enthusiastic, self-motivated, and able to thrive in a dynamic, fast paced environment

Benefits

• Comprehensive and generous benefits plan (merit increases, incentive compensation for exempt roles only)
• Paid holidays and paid time off
• Medical, dental, vision
• Short and long term disability benefits
• 401(k) + match
• Life insurance
• Various wellness programs
• The company does not provide benefits directly to contingent workers/contractors and interns.