Director Information Risk Program Office

Discover. A brighter future.
With us, you'll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it - we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.
Come build your future, while being the reason millions of people find a brighter financial future with Discover.
Job Description:
What You'll Do
Provides direction and oversight of the information security program risk management activities. Drives policies and standards to mature risk management and ensure compliances with laws and regulations. Leads third-party information security risk management efforts. Identifies information security risk to the organization and provides reporting that informs business decisions. Reports status, manages issues and mitigates risks. Provides supervision to employees and manages individual/team performance and development. Creates a culture of effective risk management, accountability, and demonstration of risk awareness across the organization.
How You'll Do It

• Provide oversight and effective challenge of DFS' information security program through controls testing, program and project reviews. Build KRI, KPI and other metrics to develop cyber risk posture and inform decisions.
• Author an annual information security risk assessment report on DFS cyber risk posture. Comply with all regulatory requirements. Present results of various assessments and risks to risk committees and appropriate regulatory agencies.
• Set policy, standard and provide oversight for information security risk management. Partner with and influence business leaders and key stakeholders to mature risk management and business resiliency.
• Partner with lines of business and corporate functions to ensure appropriate due diligence is performed to manage third party information security risk.
• Develop and lead a high-performing, cohesive and collaborative team focused on identifying opportunities to mitigate risk and mature the information security programs, including third party information security. Attract and develop technical talent, risk professionals and leaders across the department.

Qualifications You'll Need
The Basics

• Bachelor's degree in Information Security, Engineering, Business Administration and Management, Finance, or related
• 8+ years of experience in Cyber/Information Security, Information Technology Security, Military, Financial Services, or related field
• 10+ years of experience leading large teams with enterprise responsibilities
• CISSP, CISM, GSLC or CRISC certification

In Lieu of Education

• 12+ years of experience in Cyber/Information Security, Information Technology Security, Military, Financial Services, or related field
• 15+ years of experience leading large teams with enterprise responsibilities

Physical and Cognitive Requirements
The physical requirements described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable a qualified individual with disabilities to perform the essential functions of the position as required by federal, state, and local laws:

• Primarily remain in a stationary position.
• Primarily performed indoors in an office setting.
• Ability to operate office equipment such as but not limited to computer, telephone, printer, and calculator.
• Ability to communicate verbally.; Ability to communicate in written form.
• Travel up to 10% of the time.

Bonus Points If You Have

• Master's degree in Business Administration and Management, Engineering, or related
• 10+ years of experience in Cyber/Information Security, Information Technology Security, Military, Financial Services, or related field

Discover will not sponsor or transfer employment work visas for this position. Applicants must be currently authorized to work in the United States on a full-time basis.
Application Deadline:
The application window for this position is anticipated to close on Oct-28-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.
Compensation:
The base pay for this position generally ranges between $173,000.00 to $263,400.00. Additional incentives may be provided as part of a market competitive total compensation package. Factors, such as but not limited to, geographical location, relevant experience, education, and skill level may impact the pay for this position.
Benefits:
We also offer a range of benefits and programs based on eligibility. These benefits include:

• Paid Parental Leave
• Paid Time Off
• 401(k) Plan
• Medical, Dental, Vision, & Health Savings Account
• STD, Life, LTD and AD&D
• Recognition Program
• Education Assistance
• Commuter Benefits
• Family Support Programs
• Employee Stock Purchase Plan

Learn more at mydiscoverbenefits.com .
What are you waiting for? Apply today!
All Discover employees place our customers at the very center of our work. To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.
Discover is committed to a diverse and inclusive workplace. Discover is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or other legally protected status. (Know Your Rights & Pay Transparency Nondiscrimination Provision)
Discover complies with federal, state, and local laws applicable to qualified individuals with disabilities and is committed to providing reasonable accommodations. If you require a reasonable accommodation to search for a position, to complete an application, and/or to participate in an interview, please email [email protected] . Any information you provide regarding your accommodation needs will be kept confidential and will only be used to determine and provide necessary accommodation.