Flexible Riso Jobs (NOW HIRING)

About Us:

Who is Mercedes-Benz Financial Services?
Mercedes-Benz Financial Services, part of the global company Mercedes-Benz Mobility AG is the captive financing and mobility solutions company of the global luxury automobile manufacturer, Mercedes-Benz AG. We offer a comprehensive range of automotive financial and insurance products that make it easy for our customers to drive their dream Mercedes-Benz vehicle.  
Why work at Mercedes-Benz Financial Services?
Working at Mercedes-Benz Financial Services is more than a job - it's an opportunity to join an innovative team where you are valued for your contributions. As an employee, you will experience career development in a positive, employee-centric environment. We're a global company that not only offers best-in-class products to our customers but also best-in-class benefits to our employees. Our employees experience a comfortable, friendly environment and relaxed, inclusive culture.   

Job Overview:

Responsibilities:

• Risk Management: Coordinate with Regional Information Security Officer (RISO) organizations
  and markets to ensure the timely identification of cyber risk across markets as well as
  compliance with all appropriate regulatory requirements and internal cybersecurity policies
  and standards.
  Establish global MBFS risk management methodology, standards, guidelines and procedures.
  Provide enablers and guidance on conducting risk assessments to the markets
  Work with regional Legal functions to ensure MBFS cybersecurity and regulatory
  requirements are properly addressed in third party contracts.
  Collaborate with the markets to develop the annual cybersecurity risk assessment plan
  including third party risk assessments.
  Perform third party vendor security assessments (remote and on-site).
  Ensure third party vendors are aware and comply with Mercedes and MBFS Cybersecurity
  policies and standards.
  Provide guidance to the markets and support plan execution.
  Track the completion of risk assessments across markets and regions.
  Analyze and review risk assessment results for accuracy and consistency.
  Collaborate with the markets to develop the appropriate risk mitigation and remediation
  plans and document key decisions and risk acceptance.
  Gather risk related metrics from markets for regional aggregation and reporting up through
  the Global Governance, Risk and Compliance function.
  Promote collaboration and facilitate the sharing of risk-related information among regional
  and market ISOs.
  Support the region and markets with the Mercedes Risk Management processes (40%)

• Information Management: Oversee deployment of a high-value asset framework and 

  information management controls across the region to drive the proper application of security 

  controls in a manner that is commensurate with the associated risks.

  Provide and educate markets on the use of the global high value asset framework, enabler 

  and processes to ensure consistency across the region.

  Provide guidance and educate markets on processes to maintain the high value asset 

  inventory.

  Provide guidance and support to the markets in identifying high value assets, performing 

  high value asset assessments and implementing controls (30%)

• Proactive Leadership: Actively communicate and keep abreast of the latest trends in 

  cybersecurity, governance, and risk and compliance management.

  Stay current on industry leading practices.

  Stay current on changes in the regional regulatory landscape.

  Actively contribute to request for input and feedback into regional and local GRC initiatives. 

  Facilitate meetings with business members and participate in projects relating to changes in 

  regulatory requirements and audit for examination of findings. (10%)

• Coordinate internal and external audit engagements, managing audit evidence collection, 

  supporting control testing and assessment activities, tracking and remediating audit findings, 

  and ensuring ongoing compliance with applicable regulatory requirements and internal 

  security policies. (10%)

• Ensure compliance with IT Internal Controls over Financial Reporting (ICFR) requirements by 

  supporting the design, implementation, and ongoing effectiveness of IT general controls

  (ITGCs) related to financial systems. This includes access management, change management, 

  and IT operations controls; coordination of control testing with internal and external auditors; 

  maintenance of control documentation and evidence; and timely remediation of identified 

  deficiencies to support SOX compliance and accurate financial reporting (10%)

  
   

Qualifications:

Applicants must be legally authorized to work in the U.S. at the time of application. Relocation assistance will not be provided for this position. 
This position requires a minimum of 5 years of overall work experience. Preferred experience includes:

• Information Technology: 5 years

• Strategy: 1 year
• Vendor Management: 1 year

Education:
Bachelor's Degree is required. Recommended majors include:

• Management Information Systems
• Information Security
• Risk Management
• Cyber Security

Additional Knowledge:

Skills:

• Analytical skills:
  • Ability to collect data and establish facts and identify trends and variances
• IT skills:
  • Networking
  • e-Technologies/Web
  • Testing
  • Programming
• Presentation skills
• Problem Solving skills

Additional Skills:

• Minimum of 5 years of relevant work experience in cybersecurity policy, standards, compliance, legal, or risk management functions.
• Experience identifying, evaluating, and managing risk in a complex and changing environment.

• Experience discerning an organization's protection needs (i.e., security controls) for information systems and networks.

• Experience with the definition and identification of high value information assets.
• Experience working on a global team is preferred.
• Financial Services, Fintech and/or Banking and automotive experience preferred.
• Financial Services, Fintech and/or Banking and automotive experience preferred.
• Strong cybersecurity risk management and governance experience in a large complex business organization.
• Experience implementing and operating leading-edge governance-enabling technologies.

• Experience with third party management frameworks.

Posting Statement

If you were not re-directed successfully after clicking the "Apply for this job" button, please click the following link to search and apply for the role on the local career portal: https://daimler.taleo.net/careersection/ex/jobsearch.ftl

Mercedes-Benz Financial Services offers competitive salary, performance-based bonuses and a full suite of benefits including 401(K) with match, generous vacation and personal time, a Mercedes-Benz car program as well as flexible work arrangements. 

EEO/Minorities/Females/Disabled/Vets

#LI-JM2