Lead Security Risk Assessment Analyst Job Details | Lincoln Financial

Lincoln Financial is a financial services company providing insurance, annuity, retirement, and related financial products. The Lead Security Risk Assessment Analyst develops and conducts information security risk assessments of external parties and evaluates third-party risks against organizational requirements. The role recommends risk mitigation strategies, communicates findings to stakeholders, maintains governance documentation, and evaluates security risks associated with artificial intelligence solutions.

Responsibilities:

• Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln’s information security risk management requirements for the services to be provided
• Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards
• Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders
• Effectively escalates and challenges risks, exceptions, and concerns using a fact-based, solution-oriented approach while maintaining productive working relationships
• Assists in creating and enforcing information security standards, policies and procedures
• Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security
• Communicates complex security and risk concepts in a professional, constructive, and audience-appropriate manner, adapting messaging to various levels of technical expertise, organizational role, and business need
• Builds credibility, trust, and productive working relationships through effective stakeholder engagement, active listening, respectful professional communication, and demonstrated openness to differing perspectives
• Demonstrates sound judgment and organizational awareness when communicating concerns, advocating positions, and navigating disagreement, ensuring productive outcomes and positive stakeholder experiences
• Responds to incoming requests from external parties for information concerning Lincoln’s information security practices by providing appropriately scoped and accurate information in a timely and professionally written manner
• Reports status of engagements to Information Security management, project managers, and other business stakeholders as appropriate
• Develops, analyzes, and leverages metrics, trends, and key performance indicators (KPIs) to measure program effectiveness, identify opportunities for continuous improvement, and influence leadership decision-making
• Records pertinent documentation and communications for all assessments in Lincoln’s online information technology (IT) governance, risk, and compliance platform
• Evaluates and identifies security risks of third-party artificial intelligence (AI) solutions to provide guidance to internal stakeholders based on Lincoln policies and industry best practices
• Applies working knowledge of AI technologies, including generative AI, to evaluate third-party risk, identify emerging security considerations, and support responsible adoption within the organization
• Maintains knowledge of emerging AI trends, technologies, and associated security risks to support innovation and responsible adoption within the organization

Requirements:

• 4 Year/Bachelor's degree in Information Systems, IT Audit, Information Security, Information Risk Management, or related field or equivalent – OR - Work experience (Minimum 4 years of experience in lieu of Bachelor's)
• 5+ years of experience in IT Security, IT Audit or Information Risk Management that directly aligns with the specific responsibilities for this position
• 2+ years of experience in Artificial Intelligence that directly aligns with the specific responsibilities for this position
• CompTIA Security+ certification or greater preferred