Do you like using your IT skills to solve complex problems in a highly collaborative environment? Join the UFP Industries' IT team where you will be integral to the continuous improvement of our company.
Job Summary
This position is responsible for reporting the overall status of the information technology and information security risk programs. This position will be responsible for identifying and documenting potential gaps, making recommendations for improvement and/or mitigation, and obtaining evidence to test remediation efforts. This position will also develop a Vendor Risk management program.
Principal Duties and Responsibilities
Report on the overall status of the risk program, including the outcomes of risk assessments, mitigation activities, and related projects/program accomplishments.
Work with businesses to design, author, and commit to risk mitigation actions (issues and/or exceptions) and tracks the status of these actions.
Create a vendor risk management program, and assess and score vendors that work with UFP.
Analyzes technical and procedural controls for potential risk events, assessing the likelihood, severity, and potential business impact of findings.
Follow guidelines & standards and training on Risk Management practices and procedures appropriate for UFP's needs to ensure that risk responsibilities are understood and carried out throughout the enterprise. Execute technology process improvement projects and transformational initiatives to improve IT risk and control profile
Ensures compliance with applicable federal, state, and local laws and regulations. Completes all required compliance training. Maintains knowledge of and adheres to UFP's internal compliance policies and procedures. Takes responsibility for keeping up to date with changing regulations and policies.
Develop security and privacy controls that map to NIST SP 800-53
Qualifications
Proficient in documenting technical processes and procedures
Extensive working experience in medium to large enterprises
Knowledge and experience in the following areas:
Experience diagnosing and resolving performance issues
Maintaining consistent system documentation
The Company is an Equal Opportunity Employer.
Universal Forest Products and its subsidiaries and affiliates are equal opportunity employers. All qualified candidates will receive consideration without regard to race, color, religion, sex or national origin.
