This position is responsible to participate in the information security vendor assessment and standard exceptions processes. The growing regulatory and audit oversight of these critical activities is only increasing, and continued execution of these tasks is very important. The ability to ensure work is performed timely and with quality supports the Ameriprise Information Security Program as well as our business partners. Responsibilities include risk analysis, metrics reporting, and business support. This includes working with business partners, leadership, vendor management and IT leaders and staff.
Information Security Governance
Monitor compliance with information security policies and practices and any applicable laws.
Assist with internal and external security risk assessments, risk analysis and application or system-level vulnerability testing and reviews.
Monitor, assess and document vendor compliance with Ameriprise security requirements.
Assist with the research, development, continuous improvement and implementation of security policies, procedures, standards and processes based on compliance requirements and industry best practices.
Document the Ameriprise information security requirements, processes and procedures.
Prepare status reports on information security matters that are used for a variety of purposes - including vendor security assessment and risk management & reporting.
Effectively manage and prioritize ad-hoc reporting requests, scorecards and standard departmental reporting.
Coordinate with internal team, business partners, leadership, vendor management, and IT leaders and staff
Bachelor's degree in Computer Science, MIS, Technology Forensics or related technical field; or equivalent work experience.
1-3 years of relevant experience.
1-3 years information security analysis experience (in specialties across the function); or equivalent training and experience.
Effective written and verbal communication skills. Excellent problem-solving and analysis skills and attention to detail.
General understanding of information security processes and methodologies and its role in the Software Development Life Cycle (SDLC).
Effective analysis, problem solving, follow-through and time management skills.
About Our Company
With the right company, life can be brilliant. At Ameriprise, we're not just in the business of helping clients with their financial goals we also help our advisors and employees reach their true potential. Be part of an inclusive, collaborative culture that rewards you for your contributions and work with other talented individuals who share your passion for doing great work. You'll also have plenty of opportunities to make your mark at the office and a difference in your community. So if you're talented, driven and want to work for a strong ethical company that cares, take the next step to create a brilliant career at Ameriprise Financial.