Keith Cassant, MAOL, SPHR, CEH’s Post

#hiring *Data Risk Officer - End User Computing (Hybrid)*, Irving, *United States*, fulltime #jobs #jobseekers #careers #Irvingjobs #Texasjobs #ITCommunications *Apply*: https://lnkd.in/dKCAUQDp Operational Risk Management - Data Management (DM) is part of Citi's second line of defense (2LoD). Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.ORM-Data consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls. The Data Risk Officer - End User Computing will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational risk events and losses in assigned Enterprise Operations entities. Key Responsibilities: This role requires an individual who is inquisitive, comfortable with ambiguity, willing to learn and able to develop trusting relationships at all levels to support: Risk identification and control environment challenge by understanding business requirements and controls efficacy. Sound program management for data programs/initiatives for execution (e.g., deliverables on time, risk identification, process for milestone reporting and changes) Develop expertise on data-related best practices and standards, operational risk principles, methodologies, and tools. Challenges to End User Computing governance, strategy, and planning on an enterprise level Assess and challenge adherence with policies/standards (e.g., End User Computing Policy) and adoption of End User Computing governance capabilities and initiatives within the governance program. Drafting of challenge scope documents, assessment findings, and risk discussions with the client Participate in End User Computing governance meetings, workshops and provide feedback for new and updated standards and processes. Assess the current state of end user computing and identify areas of need. Maintain library of artifacts that support assessments Knowledge / Experience: The Data Risk Officer - End User Computing role requires experience in operational risk management or risk and controls within globally complex, dispersed, and diverse organizations. Experience implementing or executing an enterprise-level programmatic framework resulting in an effective End User Computing (EUC) management program comprising of governance, process, people, and technology is desired. Experience in an engineering or architecture function is a plus. Experience in a relevant or complementary area will be considered to include: fintech, insurance, banking, information technology, auditing,

#hiring *Data Risk Officer - End User Computing (Hybrid)*, Irving, *United States*, fulltime #jobs #jobseekers #careers #Irvingjobs #Texasjobs #ITCommunications *Apply*: https://lnkd.in/dKCAUQDp Operational Risk Management - Data Management (DM) is part of Citi's second line of defense (2LoD). Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.ORM-Data consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls. The Data Risk Officer - End User Computing will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational risk events and losses in assigned Enterprise Operations entities. Key Responsibilities: This role requires an individual who is inquisitive, comfortable with ambiguity, willing to learn and able to develop trusting relationships at all levels to support: Risk identification and control environment challenge by understanding business requirements and controls efficacy. Sound program management for data programs/initiatives for execution (e.g., deliverables on time, risk identification, process for milestone reporting and changes) Develop expertise on data-related best practices and standards, operational risk principles, methodologies, and tools. Challenges to End User Computing governance, strategy, and planning on an enterprise level Assess and challenge adherence with policies/standards (e.g., End User Computing Policy) and adoption of End User Computing governance capabilities and initiatives within the governance program. Drafting of challenge scope documents, assessment findings, and risk discussions with the client Participate in End User Computing governance meetings, workshops and provide feedback for new and updated standards and processes. Assess the current state of end user computing and identify areas of need. Maintain library of artifacts that support assessments Knowledge / Experience: The Data Risk Officer - End User Computing role requires experience in operational risk management or risk and controls within globally complex, dispersed, and diverse organizations. Experience implementing or executing an enterprise-level programmatic framework resulting in an effective End User Computing (EUC) management program comprising of governance, process, people, and technology is desired. Experience in an engineering or architecture function is a plus. Experience in a relevant or complementary area will be considered to include: fintech, insurance, banking, information technology, auditing,

Why SMB Financial Companies Should Partner With An MSP! For small to medium-sized financial companies, leveraging the services of an MSP can mean the difference between struggling with IT management and focusing on growth and customer service, which can ultimately lead to a more successful business. Expertise and Specialization: Financial companies operate in a highly regulated sector where compliance with standards like PCI-DSS, GDPR, and SOX is critical. MSPs often have the expertise to ensure that these companies meet these requirements. Cost Efficiency: By outsourcing IT management to an MSP, financial companies can reduce the need for full-time staff for their IT needs, which can be especially significant for small to medium companies looking to control costs. Risk Management: Financial companies deal with sensitive data that require secure handling. MSPs can provide robust cybersecurity measures, data backup, and disaster recovery plans to mitigate risks. Focus on Core Business: By outsourcing IT services, financial companies can focus on their core competencies like customer service, product development, and strategic growth, rather than being distracted by complex IT decisions and operations. Regulatory Compliance and Reporting: Financial firms are subject to strict regulatory compliance requirements. MSPs can assist in ensuring that IT systems are compliant. Contact us today www.gradiusitsolutions.com

Scalability and flexibility: As businesses grow and evolve, they require software solutions that can scale with their needs. For example, a risk enterprise management system should be able to handle an increase in the volume of data and transactions as a company expands, without sacrificing performance. https://lnkd.in/ggWJP9Du

If you're working on your #GRC #ERM #Governance #RiskManagement #Compliance and #Audit strategy plans for 2024, we've got news for you! Forrester's Total Economic Impact™ (TEI) study of #Resolver shows remarkable outcomes for organizations using Resolver's #RiskIntelligence software. We're thrilled to share that customers surveyed achieved a whopping 327% Return on Investment (ROI) over three years! 📈 🤝 Discover how Resolver can help your organization streamline GRC, boost efficiency, and elevate decision-making. Get the stats you need to build your business case and mature your discipline with technology. Learn more: https://rslvr.co/3EXyZqM

#hiring *Data Risk Officer - End User Computing (Hybrid)*, Irving, *United States*, fulltime #jobs #jobseekers #careers #Irvingjobs #Texasjobs #ITCommunications *Apply*: https://lnkd.in/g3yqPJXm Operational Risk Management - Data Management (DM) is part of Citi's second line of defense (2LoD). Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.ORM-Data consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls. The Data Risk Officer - End User Computing will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational risk events and losses in assigned Enterprise Operations entities. Key Responsibilities: This role requires an individual who is inquisitive, comfortable with ambiguity, willing to learn and able to develop trusting relationships at all levels to support: Risk identification and control environment challenge by understanding business requirements and controls efficacy. Sound program management for data programs/initiatives for execution (e.g., deliverables on time, risk identification, process for milestone reporting and changes) Develop expertise on data-related best practices and standards, operational risk principles, methodologies, and tools. Challenges to End User Computing governance, strategy, and planning on an enterprise level Assess and challenge adherence with policies/standards (e.g., End User Computing Policy) and adoption of End User Computing governance capabilities and initiatives within the governance program. Drafting of challenge scope documents, assessment findings, and risk discussions with the client Participate in End User Computing governance meetings, workshops and provide feedback for new and updated standards and processes. Assess the current state of end user computing and identify areas of need. Maintain library of artifacts that support assessments Knowledge / Experience: The Data Risk Officer - End User Computing role requires experience in operational risk management or risk and controls within globally complex, dispersed, and diverse organizations. Experience implementing or executing an enterprise-level programmatic framework resulting in an effective End User Computing (EUC) management program comprising of governance, process, people, and technology is desired. Experience in an engineering or architecture function is a plus. Experience in a relevant or complementary area will be considered to include: fintech, insurance, banking, information technology, auditing,

#hiring *Data Risk Officer - End User Computing (Hybrid)*, Tampa, *United States*, fulltime #jobs #jobseekers #careers #Tampajobs #Floridajobs #ITCommunications *Apply*: https://lnkd.in/dd7kwYxM Operational Risk Management - Data Management (DM) is part of Citi's second line of defense (2LoD). Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.ORM-Data consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls. The Data Risk Officer - End User Computing will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational risk events and losses in assigned Enterprise Operations entities. Key Responsibilities: This role requires an individual who is inquisitive, comfortable with ambiguity, willing to learn and able to develop trusting relationships at all levels to support: Risk identification and control environment challenge by understanding business requirements and controls efficacy. Sound program management for data programs/initiatives for execution (e.g., deliverables on time, risk identification, process for milestone reporting and changes) Develop expertise on data-related best practices and standards, operational risk principles, methodologies, and tools. Challenges to End User Computing governance, strategy, and planning on an enterprise level Assess and challenge adherence with policies/standards (e.g., End User Computing Policy) and adoption of End User Computing governance capabilities and initiatives within the governance program. Drafting of challenge scope documents, assessment findings, and risk discussions with the client Participate in End User Computing governance meetings, workshops and provide feedback for new and updated standards and processes. Assess the current state of end user computing and identify areas of need. Maintain library of artifacts that support assessments Knowledge / Experience: The Data Risk Officer - End User Computing role requires experience in operational risk management or risk and controls within globally complex, dispersed, and diverse organizations. Experience implementing or executing an enterprise-level programmatic framework resulting in an effective End User Computing (EUC) management program comprising of governance, process, people, and technology is desired. Experience in an engineering or architecture function is a plus. Experience in a relevant or complementary area will be considered to include: fintech, insurance, banking, information technology, auditing

Are your organization's internal controls just ticking boxes without real efficacy? Is your company risking financial integrity due to ineffective internal controls? Strong internal controls ensure transparency and accountability, significantly reducing the risk of fraud and enhancing operational efficiency. By rigorously implementing and regularly reviewing internal controls, organizations can safeguard assets and secure financial stability. Recurring Audit Exceptions: Continuous findings of non-compliance in internal audits indicate weak controls. Unauthorized Transactions: Evidence of transactions not approved per established protocols suggests lapses in control mechanisms. Inconsistent Financial Reporting: Fluctuations in financial reporting that don't align with business events may signal control deficiencies. Missing Documentation: Incomplete or missing documentation for financial transactions points to poor control and oversight. High Employee Turnover in Key Control Areas: Frequent changes in key positions can undermine the continuity and effectiveness of internal controls. Lack of Segregation of Duties: Overlapping responsibilities among staff without adequate checks increases the risk of error or fraud. Delayed Reconciliation Processes: Regular delays in reconciling financial records can indicate a lack of control over the accuracy of financial information. Overridden Controls: Regular instances of controls being bypassed or overridden by management without proper justifications suggest weak governance. Unresolved Access Violations: Persistent issues with unauthorized access to systems or data reveal deficiencies in access controls. Inadequate Response to Previous Audits: Failure to address issues raised in prior audits denotes a disregard for control improvement. Complaints and Whistleblower Alerts: Frequent or unresolved complaints related to unethical behavior or fraud are indicative of inadequate controls. Unusual Write-offs or Adjustments: Frequent or unexplained write-offs or adjustments can point to mismanagement or concealment of issues. Complex and Unclear Policies: Overly complex or unclear internal control policies can hinder compliance and effectiveness. Lack of Employee Training on Controls: Insufficient training on control procedures and policies reduces their effectiveness and compliance. Excessive Manual Interventions in Automated Systems: Heavy reliance on manual overrides in automated processes signals potential control issues. Poor IT Security Measures: Inadequate cybersecurity measures expose the organization to data breaches and compliance risks. Limited Oversight of Third-party Providers: Insufficient monitoring of third-party actions that impact the organization's control environment. Absence of Regular Control Reviews: Weak Tone at the Top: Leadership not demonstrating a commitment to integrity and ethical values can undermine the entire control environment.

👉 Charting the GRC Course: Trends and Challenges in 2024 2024 will be exciting for those in the Governance, Risk, and Compliance (GRC) career disciplines. Highly regulated industries will continue to go through seismic changes across new regs, technology, external vendors, business processes, and human capital. Here's what I am thinking about going into the first quarter: ✴️ Regulation - How will the largely uncoordinated regulatory requirements for the US financial services sector? What does this mean for GRC teams struggling to meet increased demands? ✴️Private Fund Compliance - How will private funds (e.g., private equity, venture capital, and hedge funds) respond to heightened SEC scrutiny? Particularly in light of a challenging fund-raising environment. ✴️Return to Office - Is 2024 the year remote work primarily becomes extinct in financial services? ✴️Third-Party Risk - How are GRC teams maintaining consistent control over their mission-critical vendors? ✴️Artificial Intelligence (AI) - How are GRC teams both leveraging as an enabler while at the same time identifying, assessing, and controlling the risks associated with it? ✴️Human Capital - Hiring will continue apace in 2024 after some notable pauses in 2023; how are organizations proactively building their bench strength? Opening it up to my network, what else is top of book going into the New Year? Please share in the comment section below. #risk #compliance #audit #GRC

#hiring *Data Risk Officer - End User Computing (Hybrid)*, Washington, *United States*, fulltime #jobs #jobseekers #careers #Washingtonjobs #DistrictofColumbiajobs #ITCommunications *Apply*: https://lnkd.in/dMtqWgwi Operational Risk Management - Data Management (DM) is part of Citi's second line of defense (2LoD). Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.ORM-Data consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls. The Data Risk Officer - End User Computing will be responsible for identifying, anticipating, challenging, and mitigating risks that could affect business objectives, and minimizing operational risk events and losses in assigned Enterprise Operations entities. Key Responsibilities: This role requires an individual who is inquisitive, comfortable with ambiguity, willing to learn and able to develop trusting relationships at all levels to support: Risk identification and control environment challenge by understanding business requirements and controls efficacy. Sound program management for data programs/initiatives for execution (e.g., deliverables on time, risk identification, process for milestone reporting and changes) Develop expertise on data-related best practices and standards, operational risk principles, methodologies, and tools. Challenges to End User Computing governance, strategy, and planning on an enterprise level Assess and challenge adherence with policies/standards (e.g., End User Computing Policy) and adoption of End User Computing governance capabilities and initiatives within the governance program. Drafting of challenge scope documents, assessment findings, and risk discussions with the client Participate in End User Computing governance meetings, workshops and provide feedback for new and updated standards and processes. Assess the current state of end user computing and identify areas of need. Maintain library of artifacts that support assessments Knowledge / Experience: The Data Risk Officer - End User Computing role requires experience in operational risk management or risk and controls within globally complex, dispersed, and diverse organizations. Experience implementing or executing an enterprise-level programmatic framework resulting in an effective End User Computing (EUC) management program comprising of governance, process, people, and technology is desired. Experience in an engineering or architecture function is a plus. Experience in a relevant or complementary area will be considered to include: fintech, insurance, ba