Specialist, Tech Risk Management

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology & Operations (GT&O) team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

The GT&O Corporate Enterprise Services organization is seeking a Specialist, Tech Risk Management
- Regulatory and Client Response, who will collaborate with GT&O's various functional areas, individual business units, and other corporate functions to identify, mitigate, and improve areas of risk that may impact our organization. Reporting to the Vice President, Tech Risk Management - Compliance Risk & Records, you will be partnering with stakeholders throughout GT&O and legal and compliance teams to ensure complete, accurate and timely responses to regulatory inquiries and client assessments.

In addition, you will bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong business insight, an inclusive leadership attitude and a continuous learning focus on all that you do.

• Partner closely with stakeholders across GT&O and Law and Compliance to ensure alignment of technology risk management and control programs with legal and regulatory requirements and mitigate potential risks
• Perform gap analysis for GT&O in connection with technology related laws and regulations and identify and elevate issues and potential solutions; influence and assist process and control owners to close gaps in their controls and adopt processes in support of legal and regulatory requirements
• Prepare and submit timely regulatory responses and evidence as required
• Support external audit (e.g. SOC/SOX) activities, including scope & coverage, walkthroughs, testing and annual attestations
• Support client technology and security assessments of Prudential, including due diligence questionnaires and client calls to review Prudential's policies and controls
• Support third party security due diligence reviews, including review of third-party SIG responses against Prudential's requirements
• Assist in managing GT&O's records management program in support of enterprise requirements
• Foster a culture of continuous improvement and excellence, and lead initiatives to drive efficiencies and synergies in the implementation of risk management practices and other enterprise oversight functions

• Bachelor's Degree
• Minimum of 3-5 years' experience in technology risk, compliance, or similar roles
• Core Risk/Governance Technical
  
  Skills:
  
  Should have technical acumen related to IT processes, practices and capabilities with subject matter knowledge of components and risks within Cloud, Information & Cyber Security, Agile development methodology, Computer and Network Infrastructure and Privacy
• Knowledge of relevant global IT risk management frameworks (e.g., NIST, ITIL, ISO, COBIT, SANS) for development, maintenance, and enterprise alignment of the risk framework and taxonomy with enterprise processes, risk frameworks and reporting constructs
• Comprehension of relevant client, legal, and regulatory requirements and ability to perform compliance-based gap analysis using regulatory based frameworks, such as System & Organization Control (SOC 1 &
  2) Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), European Union General Data Protection Regulation (GRPR), and California Consumer Privacy Act (CCPA)
• Ability to apply risk leadership skills in execution of IT operational risk and control assessments and third-party risk assessments, to determine risk opinion that product technologies and capabilities are fit for the risk appetite of the organization
• Knowledge of IT Governance, Risk, and Compliance (GRC) software (e.g., RSA Archer, IBM Open Pages, SAP GRC, Service Now GRC) for effective organization and utilization of IT risk data
• Self-confident, willing to challenge status quo, trustworthy and high integrity
• Demonstrated ability to influence with comfort and ability working between organizational structures to effect significant change, self-starter comfortable working independently and within a team…