United States
Temple Health
Personal (Telecom Argentina)
Technology Risk Specialist (RiskIT) - Personal Pay
United States
Arkansas, United States
Automatic translation. Check the original.
About Us
Increasingly Personal
We are Personal, a company that supports and empowers people's lives through technology. Our proposal is designed so that every person, community, and organization can advance, connect, enjoy, and transform their reality. In the Non-Financial Risk team, we are adding a Technology Risk Specialist (RiskIT) to lead the management of technology risk, information security, business continuity, and critical suppliers for Personal Pay, as a second line of defense. We are proud to be protagonists of the country's technological and social evolution, and that is why we need you on our team.
Role Mission
Exercise, within the Non-Financial Risk (RNF) Management and independently of the Information Technology and Information Security areas, the second line of defense regarding the comprehensive technology risk of Personal Pay: technology, information security, business continuity, and critical suppliers, challenging the design and effectiveness of controls.
#LI-HYBRID#LI-SS1
Join the most challenging digital transformation in the country!
Main Responsibilities
- Apply and maintain the technology and information security risk management methodology, including the assessment prior to the incorporation of new products, processes, systems, or technologies.
- Identify, assess, and monitor the entity's technology and information security risks, and keep the IT/IS risk matrix updated with input from Information Technology and Information Security.
- Assess the design and effectiveness of existing Technology and Information Security controls, and propose recommendations for improvement.
- Define, together with Information Technology, and monitor key risk indicators (KRI) for technology and information security.
- Exercise methodological responsibility for the Business Impact Analysis (BIA) and coordinate the survey, maintenance, and annual testing of the Disaster Recovery Plan (DRP).
- Execute risk due diligence on critical suppliers — technological and non-technological — before and during the contractual relationship.
- Coordinate periodic assessments of critical suppliers, and maintain the registry of third-party concentration and criticality.
- Follow up on High/Critical risk treatment plans and corrective measures derived from audit findings and regulatory inspections; record operational loss events of technological origin.
- Periodically report the technology, information security, and critical third-party risk profile to the RNF Management and current governance bodies (committees, Board of Directors).
- Assess and monitor risks associated with data management and governance and the adoption of artificial intelligence in business and technology processes.
We are looking for protagonists who dare to:
- Exercise the second line of defense regarding the comprehensive technology risk of Personal Pay: technology, information security, business continuity, and critical suppliers.
- Assess and monitor technology and information security risks, keeping the IT/IS risk matrix updated.
- Challenge, with technical criteria, the design and effectiveness of Technology and Information Security controls.
- Maintain the business continuity framework (BIA/DRP) and coordinate its annual tests.
- Manage the risk of our critical suppliers — due diligence, notifications to the BCRA, periodic assessments — in coordination with IT Governance, Legal, and Procurement.
- Assess and monitor risks of data management and the adoption of artificial intelligence, autonomous agents, and robotic process automation (RPA) in our business and technology processes.
- Report the technology and third-party risk profile to the RNF Management and governance bodies (committees, Board of Directors).
Minimum requirements
And have these experiences and skills:
- 5+ years of experience combining technology risk / information security with third-party risk management in financial entities, fintechs, or payment service providers (PSP).
- Knowledge of Section 10 of the RMGCTI (Com. “A” 8401) regarding outsourcing, and of the BCRA regulations applicable to technology risk and cybersecurity (RMGCTI — Com. “A” 7724/8401/8398 — and RMRTSD — Com. “A” 7783).
- Knowledge of IT/IS risk management frameworks (ISO/IEC 27001/27002, COBIT, NIST, or similar).
- Experience in business continuity (BIA/DRP) and in due diligence and contractual management of critical suppliers.
- Experience working with Legal, Procurement, Information Technology, and Information Security areas.
- Second-line profile: ability to challenge the design and effectiveness of third-party controls with technical criteria.
- Knowledge of risks linked to data management and governance (quality, privacy, data governance) and the adoption of artificial intelligence, autonomous agents, and robotic process automation (RPA) in financial or fintech environments.
- Desirable: background in Systems, Engineering, or related fields; CISA, CISM, CRISC, or similar certifications.
What do we have to offer you?
- 🌏 Flexible work arrangements
- 🏆 Performance bonus
- ✈️ An extra week of vacation
- 📱 Exclusive discounts and bonuses on our Personal and Flow brands (internet, mobile connectivity, and entertainment) for you and your family
- 🏥 Company-paid prepaid health insurance for you and your family group
- 📕 Free access to the digital learning content platform
- 🎓 Special bonuses at top-tier universities
- 👫 Referral program with financial recognition
And much more!
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile