About this role
Lead Security Risk Assessment Analyst
The Role at a Glance This position will develop and conduct information security risk assessments on parties external to Lincoln Financial Group to ensure that information security risks associated with those relationships are within acceptable tolerances. The Sr. Analyst will provide direction and guidance to stakeholders concerning risks associated with assessment findings and adherence to applicable procedures, regulations, and/or laws.
What you'll be doing
- Performs complex risk assessments of external party information security controls to ensure they meet or exceed Lincoln’s information security risk management requirements for the services to be provided.
- Determines information security risk profiles for various vendor and business partner services using questionnaires and knowledge of Lincoln policy and relevant industry best practices and standards.
- Recommends mitigation plans/solutions to eliminate, reduce, or mitigate risk, and communicates said solutions to both external parties and internal business stakeholders.
- Effectively escalates and challenges risks, exceptions, and concerns using a fact-based, solution-oriented approach while maintaining productive working relationships.
- Assists in creating and enforcing information security standards, policies and procedures.
- Researches and maintains current knowledge regarding information security issues, trends, and legislation related to information security.
- Communicates complex security and risk concepts in a professional, constructive, and audience-appropriate manner, adapting messaging to various levels of technical expertise, organizational role, and business need.
- Builds credibility, trust, and productive working relationships through effective stakeholder engagement, active listening, respectful professional communication, and demonstrated openness to differing perspectives.
- Demonstrates sound judgment and organizational awareness when communicating concerns, advocating positions, and navigating disagreement, ensuring productive outcomes and positive stakeholder experiences.
- Responds to incoming requests from external parties for information concerni