Sr Manager, IT Risk and Audit Compliance (Hybrid)

JOB SUMMARY

Experience what being part of the Globe Life family feels like. Be inspired by your leaders, encouraged, and cheered on by your teammates to excel and be supported in your career while working with us. We offer a competitive salary with a great benefits package, including 401(K) match, medical, dental, and vision health plans, short – term and long-term disability, paid time off, tuition reimbursement and other career development opportunities.

The IT Risk and Audit Compliance Sr Manger is responsible for establishing and maintaining Globe Life’s overall IT risk and compliance management program, which will be designed to ensure that the company’s risk related to IT assets, partnerships, and resources are adequately accounted and planned for. The individual in this position is responsible for identifying, evaluating and reporting on IT risks in a manner that meets Globe Life’s regulatory and other compliance requirements. The Senior leader works proactively with various IT departments to implement practices that meet Globe Life’s defined policies and standards for IT risk management. While this role will interact with our Information Security risk groups, it’s primary focus will be on non-cybersecurity related risks and SOX related audits.

The Sr Manager, IT Risk and Audit Compliance is the "process owner" for all of Globe Life’s IT related risk and audit assessments and identification activities for IT and its IT dependent strategic business objectives. A crucial element of the role is working with line-of-business managers and other key decision makers to determine acceptable levels of residual risk for the company as a whole and for various internal departments and organizations.

The ideal candidate for this position is a proven leader, problem solver and integrator of people and processes, as well as an effective internal consultant. The individual must also possess solid domain competencies in a number of IT risk and audit related disciplines, including business continuity management, disaster Recovery, privacy, Audit, and compliance. Globe Life’s IT risk management activities have, in the past, focused largely on technical solutions. However, effective risk management requires a more-comprehensive and performance-based approach that aligns levels of protection with business needs. For this reason, the IT risk manager must be much more than simply a technology and controls expert, it must also possess significant management and communications skills and extensive business knowledge.

PRIMARY DUTIES & RESPONSIBILITIES

• Manage all the risk-related activities of Globe Life’s IT organization, including budgeting, planning, testing, reporting, and recommending appropriate remediation measures.
• Manage oversight and monitoring of risk mitigation and coordination of policy and controls to ensure that other managers are taking effective remediation steps.
• Benchmark the risk management practices of other companies, particularly those in related industries or with similar business models
• Maintain an up-to-date understanding of industry best practices and monitor the legal and regulatory environment for developments that could require changes to Globe Life’s established IT policies and practices.
• Create, disseminate and (as required) update documentation of Globe Life’s matrix of identified IT risks and controls.
• Work directly with other internal departments and organizations to facilitate IT risk analysis and risk management processes, identify acceptable levels of residual risk, and establish roles and responsibilities related to risk classification and mitigation.
• Facilitate alignment and communications by forming an IT risk management steering committee or advisory board.
• Follow up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.
• Review, modify, and create audit related processes that drive to 100% compliance from audit responders.
• Lead employee(s) within the risk and audit program including performance management, hiring, mentoring, and challenging the team to continuously grow and mature Globe Life processes.

How Will Success Be Evaluated?

• The scope of the IT risk manager’s role will be determined by the Vice President of IT Service Management, who will also be responsible for evaluating the IT risk manager’s performance, with input from the CTO.
• The IT risk manager’s performance will largely be evaluated based on success in identifying IT risks and IT-related business risks, and developing and implementing effective policies, with regularly tested controls, to manage those risks.

KNOWLEDGE, SKILLS, & ABILITIES

• Basic knowledge of a broad range of standards and frameworks — for example, ITIL, ISO 20000, Capability Maturity Model Integration
• Knowledge of common risk management methodologies — for example, Control Objectives for Information and Related Technology and Committee of Sponsoring Enterprise Risk Management
• Strong collaboration skills are a must.
• In-depth understanding of strategic business risks related to IT
• Ability to develop a comprehensive understanding of Globe Life’s business, market and industry and relate that knowledge to identified related risks.
• Knowledge necessary to propose relevant IT responses to changing business risks and regulatory changes
• Proven ability to communicate with people at all levels — from developers to C level executives.
• Excellent written and verbal communication skills — including the ability to effectively communicate IT risk-related concepts to technical and nontechnical audiences — and strong interpersonal and collaborative skills
• Strong skills as a negotiator, to facilitate commitment and sign-off
• High level of personal integrity, with the ability to handle confidential and otherwise sensitive matters professionally and with the appropriate level of judgment and maturity
• High degree of initiative, dependability and ability to work with little supervision

 Applicable to all employees of Globe Life & Accident and its subsidiaries:

• Reliable and predictable attendance of your assigned shift
• Ability to work full time and/or part time based on the position specifications.

EDUCATION & WORK EXPERIENCE REQUIRED

• 5 to 7 years of experience in IT risk management or a related discipline (for example, security, privacy, business continuity management or compliance).
• Minimum Bachelor of Science preferred, with a focus on IT- or IT-risk-related disciplines (for example, security, privacy, business continuity management and compliance). A business degree is beneficial.
• Experience in standing up and running new programs.