Associate II Information Security-SUPPORT SERVICES-IT Security

Job Title: IT Risk & Asset Inventory Manager

Job Summary:

We are seeking a detail-oriented and proactive IT Risk & Asset Inventory Manager to oversee IT asset governance, regulatory compliance, and audit coordination. The ideal candidate will have hands-on experience managing IT asset inventories, supporting regulatory submissions, and ensuring adherence to compliance standards such as PCI DSS and Digital Payment Security Standards.

Key Responsibilities:

• Manage and maintain accurate IT Asset Inventory across applications, servers, devices, and networks.
• Conduct Level 1 reviews for business and infrastructure applications to ensure proper classification and compliance.
• Ensure controls outlined in SOPs and SLAs are met for audit and regulatory compliance.
• Serve as the primary liaison for regulatory submissions and internal/external audits.
• Support IT teams in onboarding applications onto the IT Asset Inventory platform.
• Maintain application interface lists for RBS tranche reporting.
• Collaborate with business users to streamline IT asset inventory processes and contribute to roadmap development.
• Publish regular compliance status reports to senior stakeholders.
• Ensure timely closure of ITGC statutory audits by providing necessary documentation and responses.
• Monitor and review compliance with standards such as PCI DSS, DPSC, and other regulatory frameworks.

Required Skills & Competencies:

• Strong understanding of IT governance, risk control, and audit processes.
• Experience with regulatory submissions and compliance standards.
• Proficiency in IT Asset Inventory management tools and methodologies.
• Excellent communication, collaboration, and problem-solving skills.
• Ability to manage multiple stakeholders and coordinate across teams.

Qualifications:

• Bachelor’s degree in Computer Science or related field.
• 2+ years of experience in IT risk management or asset inventory roles.
• Familiarity with compliance standards like PCI DSS, DPSC, and ITGC audits.