... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
... Security, and Technology teams in complex, multi-system, and/or global operating environments Strong command of risk assessment, control design, control execution, evidence expectations, control ...
Chief Research Security and Export Control Officer, Academic Affairs, Research and Student Success &
Knoxville, TN · On-site
Risk Assessment & Mitigation: Perform comprehensive risk assessments to identify vulnerabilities and develop mitigation strategies for security threats. International Activity Review: * Review ...
Chief Research Security and Export Control Officer, Academic Affairs, Research and Student Success &
Knoxville, TN · On-site
Risk Assessment & Mitigation: Perform comprehensive risk assessments to identify vulnerabilities and develop mitigation strategies for security threats. International Activity Review: * Review ...
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Quick apply
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Director, IT Infrastructure and Cloud
Brentwood, TN · On-site
$150 - $190/hr
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Director, IT Infrastructure and Cloud
Brentwood, TN · On-site
$150 - $190/hr
Support risk assessments, security audits, and third-party/vendor risk reviews. * Ensure business continuity and disaster recovery plans are documented, tested, and aligned with clinical operational ...
Manager, IT Security
Chattanooga, TN · On-site
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Manager, IT Security
Chattanooga, TN · On-site
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Manager, IT Security
Chattanooga, TN · Hybrid
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Manager, IT Security
Chattanooga, TN · Hybrid
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Manager, IT Security
Chattanooga, TN · On-site
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Manager, IT Security
Chattanooga, TN · On-site
Experience performing security risk assessments and compliance audits. Required Skills and Attributes * Demonstrated professional integrity * Dependable, flexible, and adaptable to new ACA ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Strong understanding of cybersecurity risk assessment and exposure prioritization methodologies. * Demonstrated ability to correlate multiple security data sources into meaningful, business-focused ...
Review top-tier security vendor deliverables, penetration testing results, and third-party risk assessments against compliance metrics. Leadership & Stakeholder Engagement Executive Advisory: Partner ...
Review top-tier security vendor deliverables, penetration testing results, and third-party risk assessments against compliance metrics. Leadership & Stakeholder Engagement Executive Advisory: Partner ...
$112K - $228K/yr
... Risk Assessments, Security Technologies, Web Application Security Testing Competencies Analytical Thinking, Effective Communications, Information Security Management, Information Security ...
$112K - $228K/yr
... Risk Assessments, Security Technologies, Web Application Security Testing Competencies Analytical Thinking, Effective Communications, Information Security Management, Information Security ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Conducting risk assessments across privacy, security, model risk, and misuse scenarios, including prompt injection, sensitive data exposure, excessive agency, and overreliance, and translating ...
Freelance Security Risk Assessment information
What is the difference between Freelance Security Risk Assessment vs Security Consultant?
| Aspect | Freelance Security Risk Assessment | Security Consultant |
|---|---|---|
| Credentials | Certifications like CISSP, CISA, or CEH often required | Similar certifications, often with additional experience requirements |
| Work Environment | Independent, project-based, often remote or on-site at client locations | Typically employed by firms or consulting agencies, may work on multiple projects |
| Industry Usage | Used by organizations seeking independent risk assessments | Engaged for broader security strategy, policy development, and consulting |
While both roles involve assessing security risks, Freelance Security Risk Assessments focus on independent, project-specific evaluations, whereas Security Consultants often provide ongoing security advice and strategy within organizations or consulting firms.
What are the most commonly searched types of Security Risk Assessment jobs in Tennessee?
The most popular types of Security Risk Assessment jobs in Tennessee are:
What are popular job titles related to Freelance Security Risk Assessment jobs in Tennessee?
For Freelance Security Risk Assessment jobs in Tennessee, the most frequently searched job titles are:
What job categories do people searching Freelance Security Risk Assessment jobs in Tennessee look for?
The top searched job categories for Freelance Security Risk Assessment jobs in Tennessee are:
What cities in Tennessee are hiring for Freelance Security Risk Assessment jobs?
Cities in Tennessee with the most Freelance Security Risk Assessment job openings:
Full-time
Posted 22 days ago
Sedgwick rating
7.6
Based on 326 frontline employees who took The Breakroom Quiz
213th of 311 rated insurance
Job description
Newsweek Recognizes Sedgwick as America's Greatest Workplaces National Top Companies
Certified as a Great Place to Work®
Fortune Best Workplaces in Financial Services & Insurance
Director, IT Risk and Controls - Remote Position
PRIMARY PURPOSE OF THE ROLE: The Director IT Risk and Controls leads Sedgwick's IT risk and control governance activities, including SOX-related technology controls, IT General Controls (ITGCs), and broader technology risk and control processes. The role provides subject matter expertise, guidance, and oversight to support a consistent and sustainable control environment while partnering with Technology, Finance, Risk, Compliance, and Audit stakeholders to identify risks, strengthen controls, and support regulatory and governance requirements.
ESSENTIAL RESPONSIBILITIES MAY INCLUDE
- Leads the enterprise IT risk and control governance program, encompassing SOX, ITGCs, and broader technology risk and control activities, including IT risk assessments, control scoping and design, framework governance, and management reporting.
- Directs governance operations, including risk assessments, control documentation, issue management processes, governance reporting, control inventories, repositories, and executive reporting to support effective program administration and leadership decision-making.
- Serves as the senior subject matter expert for IT SOX compliance, ITGCs, automated controls, key reports, interfaces, end-user computing controls, third-party dependencies, and other technology controls supporting business and financial reporting objectives.
- Owns and maintains risk and control governance documentation, including narratives, RCMs, control descriptions, policies, standards, evidence requirements, control-owner guidance, and system inventories.
- Advises control owners and Technology leaders on risk identification, control design, segregation of duties, evidence requirements, compensating controls, and sustainable control execution.
- Partners with the IT Compliance function by providing program context, documentation, reporting, and management input while maintaining appropriate separation from independent assurance, testing, and remediation oversight activities.
- Monitors and reports on control effectiveness using attestations, operational metrics, continuous monitoring results, and assurance inputs; identifies trends, recurring risk themes, and matters requiring leadership attention.
- Maintains governance visibility of control deficiencies, risk exposures, and related remediation activities for reporting and management awareness while independent oversight and validation remain the responsibility of the IT Compliance function.
SUPERVISORY RESPONSIBILITIES
- Provides support, guidance, leadership and motivation to promote maximum performance.
- Administers company personnel policies in all areas and follows company staffing standards and training recommendations.
- Interviews, hires and establishes colleague performance development plans; conducts colleague performance discussions.
QUALIFICATIONS
Advanced degree in Accounting, Finance, Information Systems, Business or a related field, from an accredited college or university preferred. CISA certification strongly preferred. Additional certifications such as CPA, CRISC, CIA, CISSP, or equivalent are beneficial.
Ten (10) years of related, progressive experience in IT risk management, IT controls, IT SOX compliance, technology governance, or IT audit, including significant leadership of enterprise risk and control activities in a complex organization or equivalent combination of education and experience required. Demonstrated experience assessing technology risks; scoping systems and dependencies; and designing or advising on ITGCs, automated controls, key reports, interfaces, third-party controls, and other risk-mitigating controls highly preferred.
Skills & Knowledge
- Advanced knowledge of SOX requirements, IT General Controls, technology risk management practices, and governance frameworks, including COSO and COBIT.
- Proven ability to evaluate control design and effectiveness information, identify risk themes, develop well-supported governance recommendations, and communicate implications to senior management and control stakeholders
- Ability to partner effectively with IT Compliance, Internal Audit, External Audit, Enterprise Risk, Finance, Security, and Technology teams in complex, multi-system, and/or global operating environments
Strong command of risk assessment, control design, control execution, evidence expectations, control-effectiveness reporting, issue classification, and sustainable control ownership - Ability to translate complex technical risks and control-effectiveness information into clear business, operational, and financial reporting implications
- Executive-level written and verbal communication skills, including the ability to explain and support well-reasoned risk and control positions with senior leaders and assurance stakeholders
- Ability to influence without direct authority, establish accountability, and drive cross-functional decisions across a broad technology risk and control environment
- Advanced analytical, problem-solving, and professional judgment skills with a high degree of integrity, objectivity, and attention to detail
- Working knowledge of governance, risk, and compliance platforms, control-management tools, workflow automation, and continuous monitoring solutions
- Ability to manage multiple priorities and lead a year-round IT risk and control governance program in a fast-paced environment
- Ability to work in a team environment
- Ability to meet or exceed Performance Competencies
WORK ENVIRONMENT
When applicable and appropriate, consideration will be given to reasonable accommodations.
Mental: Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines
Physical: Computer keyboarding, travel as required
Auditory/Visual: Hearing, vision and talking
The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description. They are not intended to constitute a comprehensive list of functions, duties, or local variances. Management retains the discretion to add or to change the duties of the position at any time.
#LI-TS1 #remote
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Diego Fair Chance Ordinance, the San Francisco Fair Chance Ordinance, the California Fair Chance Act, and all other applicable laws.
Sedgwick is an Equal Opportunity Employer and a Drug-Free Workplace.
If you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, consider applying for it anyway! Sedgwick is building a diverse, equitable, and inclusive workplace and recognizes that each person possesses a unique combination of skills, knowledge, and experience. You may be just the right candidate for this or other roles.