Director, Cloud Security Specialist - Fidelity TalentSource LLC

Job Description:

Job Description:

The Risk, Compliance, and Oversight team within the CAPE Cloud Business and Engagement Office is seeking a driven, experienced, and dynamic professional to help drive and optimize our Cloud Governance, Compliance, and Audit capabilities!\u00A0 You will partner with the CAPE Product Areas and Teams to further develop and integrate Governance, Compliance, and Audit practices and processes with focus on the key role that CAPE controls play in audits and other strategic programs and certifications. You will collaborate with various CAPE Squads to perform proactive audit and control assessments, monitor technology controls, document, and coordinate remediation plans, participate in Corporate Audits, and provide External Audit support. You will engage closely with the CAPE squads on their cloud migration strategies, data governance and oversight frameworks, and other new technologies (including AI and Large Language Models), and engage with CAPE leadership and the Operational Risk, and External Audit teams.The Team

This position is a key role in CAPE providing dedicated compliance & oversight support to the internal CAPE teams while building relationships with business partners across Fidelity. The goal of the team is to cultivate a culture of Compliance, to identify and handle risk, and protect Fidelity s customers and reputation. This team is responsible for the mitigation of control gaps related to the technology environment, systems, and processes within CAPE. This role also works closely with Fidelity technology and business owners, Enterprise Cybersecurity (ECS), Information Security Officers (ISOs), Corporate Audit teams, and Fidelity external auditors and regulators.

The Expertise and Skills You Bring

• 12+ years of experience in technology risk, cyber security, controls, or audit roles.
• Bachelor s degree in computer science, technology, or a related field of study preferred.
• Your excellent verbal and written communication skills allows you to prepare and present recommendations to senior management and concisely share and gain consensus for new insights, influence decisions and make sound, compelling arguments.
• Attention to detail with logical reasoning, analytical and critical-thinking and creative problem-solving skills.\u00A0
• Experience in identifying risk metrics and developing management views to help prioritize work and identify real-time trends or anomalies.\u00A0
• Ability to identify risk, quantify impact, and drive risk mitigation/remediation across BUs, IT teams and risk partners.
• Experience performing risk assessments, control assessments, IT audits or implementing controls for large scale financial service organizations (distributed, network and cloud environments).
• Knowledge of cloud security, controls, and technology environments (AWS/Azure, SaaS, PaaS, and IaaS).
• Experience working with third party auditors, audit standards and cybersecurity frameworks (e.g., SOX, SOC2, ISO 2700x, CIS Controls, CSA Cloud Control Matrix, HIGHTRUST, etc.)
• Professional technology risk certifications (e.g., CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred.
• Experience performing risk assessments, control assessments, IT audits or implementing controls for large scale financial service organizations (distributed, network and cloud environments).
• Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer or Open Pages is preferred.
• Your technical knowledge includes a thorough understanding of the cloud and on-prem technology services.

• You can demonstrate a complete understanding of information technology processes and controls and a comprehensive understanding of risk, quality control and assurance functions.
• Your love of solving sophisticated problems, and comfort with ambiguous situations, and your ability to find innovative ways to mitigate risk using your sophisticated analytical and critical thinking skills.
• Ability to mentor and train other team members to work effectively in the risk, security, and audit roles.

The Value You Deliver

• Evaluating control completeness by performing control design and operating effectiveness reviews and peer reviewing as needed.
• Conducting in depth information technology compliance assessments including detailing controls, identifying potential gaps and/or inconsistencies and making sound recommendations for improvement and/or mitigation.
• Assist with conducting risk assessments and readiness reviews for applications and workloads on the public cloud environment.
• Assist with supervising monitoring controls related to cloud and emerging technologies and to meet applicable security, audit, regulatory requirements.
• Crafting appropriate critical metrics (KRIs) for IT compliance monitoring. Understanding and consulting on information security standards and industry best practices.
• Lead IT controls program activities: this includes documenting controls in GRC and performing IT controls testing to meet internal assurance and external audit requirements.
• Liaison between internal and external audit, tracking of internal and external audit findings, perform issue follow-up, consulting and action plans with owners and issue resolution.

Salary Grade:

7

Click link below to view the Colorado Salary Ranges Info.

Please see below for the salary range for work locations in New York City, Westchester County, NY and Jersey City, NJ only:

N/A

Please see below for the salary range for work locations in California only:

N/A

Please see below for the salary range for work locations in Washington only:

N/A

Certifications:

Company Overview

Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients money.

Join Us

At Fidelity, you ll find endless opportunities to build a meaningful career that positively impacts peoples lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a

, we have been recognized by our employees as a top 10 Best Place to Work in 2024. And you don t need a finance background to succeed at Fidelity\u2014we offer a range of opportunities for learning so you can build the career you ve always imagined.

blends the best of both onsite and offsite work experiences. Working onsite is important for our business strategy and our culture. We also value the benefits that working offsite offers associates. Most hybrid roles require associates to work onsite all business days of every other week in a Fidelity office.

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation,

, and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

We invite you to Find Your Fidelity at

.

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to

.