IT Risk and Compliance Consultant

MetLife, a leading provider of insurance and other financial services to individual and institutional customers, is seeking a IT Risk and Compliance Consultant in Troy, NY!! Beyond meaningful and challenging work, MetLife provides a variety of flexible work arrangements, as well as a tuition reimbursement program, competitive benefits, and retirement and pension plans. MetLife’s responsiveness to the needs of both clients and employees is a direct result of one of the core company values– People Count. Major Duties and Functions Include: Job Summary: Designs and maintains IT security and recovery programs. Provides guidance to applications development and business communities regarding appropriate security controls and compliance with industry best practices, continuity preparedness, and corporate policies, standards, and procedures. Functional Responsibilities: Plans, designs, enforces, and audits security policies and procedures which safeguard the integrity of and access to enterprise systems, files, and data elements. Investigates security violations including vulnerability scanning, virus management, and intrusion detection; handles highly sensitive and confidential information appropriately. Maintains knowledge of changing technologies, and provides recommendations for adaptation of new procedures This associate will be responsible for coordinating third party vendor risk and security assessments. Associate will be responsible for ensuring that third party vendors are in compliance with MetLife IT policies and standards and identify any areas of non compliance. Associates will ensure third party vendor arrangements have completed an IT risk review prior to signing a contract and that MetLife understands the risk profile of the third party vendor prior to entering into a formal agreement. Associate will be responsible for alerting line of business management of any third party vendor policy exceptions and must enter the exceptions into the policy exception tracking process. Additional responsibilities include conducting application web vulnerability scans. Associates will conduct application scans to identify known web vulnerabilities and work with AD and business staff to ensure timely remediation of issues. Associate will participate in security special projects as needed  What You Need to Succeed: Experience with coordinating 3rd party vendor risk assessment process Knowledge of security frameworks around 3rd party vendor risk assessments Experience in conducting application web vulnerability scans Knowledge of the application coding and development process Strong written and verbal communication skills are required Ability to interface with all levels of management both internally and externally Knowledge of all security domains and of technology infrastructure Certifications highly desired: CISSP, CISA, CISM (if not currently certified, must be willing to be certified within next 2 years) Must possess excellent organization skills ~ most importantly, time management Writing sample will be required ~ an example of a business communication (such as: formal email, memo, report) will be requested Work shouldn’t be something you do just to make ends meet. It should provide satisfaction…and an opportunity to make a difference. MetLife… where work meets life!Do YOU have what it takes to join a Major Force in Financial Services: Investments, Financial Advice, Banking and Insurance? If so respond TODAY! For immediate consideration, please APPLY NOW to submit your resume! MetLife is an Equal Opportunity Employer. Additional Information Position Type:  Full Time, Employee Ref Code:  20910 Number of Openings: 1 Business Area: Information Technology Travel paid for interviews? NO Relocation expenses paid? NO Percent of travel on the job: 5-15 Salary Grade: 30 Company Code: MetLife Group View all "MetLife" jobs