Cyber Risk Specialist, Cyber Reporting Analytics Manager
Remote
Full Time
#Information Security
#Data Analytics
#Risk Management
#Project Management
#Security Frameworks
#Regulatory Requirements
Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The Role:
The Cybersecurity Reporting & Analytics Manager is responsible for working with key data sources both inside and outside Cybersecurity organizations to build regular and recurring KPIs/KRIs that are used for meaningful internal and external reporting. This function and reporting mechanism needs to provide insight and clarity into various processes, risk, and control monitoring and be usable for various risk related forums up, down, and across the organization.
Once the data is obtained from the various sources, the Cybersecurity Reporting & Analytics Manager needs to consolidate the data into a digestible format that can provide insight to Program Owners and the senior leadership team on overall control monitoring and adherence. This will include the formal definition of inventories, thresholds, calculation basis, and alerts based on the data captured and the stated controls being monitored. This role requires a strategic approach to Cybersecurity risk management and compliance, alignment with relevant regulations and industry standards, and the adherence to Reporting & Analytics principles and best practices.
The Cybersecurity Reporting & Analytics Manager acts as the primary liaison between Data Owners, System Owners, Tool Owners, and produces reports and dashboards that are reviewed by various Centers of Excellence within the SoFi Cybersecurity organization for input and feedback. In addition, the Cybersecurity Reporting & Analytics Manager needs to partner with Centers of Excellence outside of Cyber such as Technology, Finance, Legal, Compliance, Procurement, Fraud, Operations, etc. and communicate effectively with 2nd, 3rd, and 4th line of defense counterparts on KPI and KRI review.
What You’ll Do:
- Lead and manage Cybersecurity Reporting & Analytics from source data capture, to data consolidation, to report development, and to report delivery.
- Respond to questions on source data, total populations, calculations, KPIs, and KRIs from all stakeholders that receive and review report output.
- Design and develop practical and iterative Reporting & Analytic tool options that allow for quick development and deployment but also enhanced end state solutions.
- Coordinate with cross-functional teams and stakeholders to ensure Reporting & Analytics cycles, timelines, and outputs are met.
- Act as a Subject Matter Expert on data analytics and data interpretation with key stakeholder groups and during senior leadership governance reviews.
- Work within the Cybersecurity Reporting & Analytics system of record and drive for consistency, audibility, and enforcement of key lifecycle steps and industry best practices.
- Engage effectively with key stakeholders from both inside and outside the SoFi Cybersecurity team for formal review and approval of KPI and KRI output.
What You’ll Need:
- Bachelor’s or master’s degree in Computer Science, Information Security, Risk Management, or a related field.
- 5+ years of experience in a Cybersecurity Reporting & Analytics role in a Financial Services organization.
- Hold one or more relevant industry certifications such as a CRISC, CISSP, CISA, or CISM.
- Proven ability to quickly assimilate new information and drive for ongoing effective Cybersecurity Reporting & Analytics best practices.
- Experience with regulatory examinations and a strong technical understanding of audit and testing concepts.
- Ability to thrive in a fast-paced, dynamic environment, managing multiple Reporting & Analytics deliverables concurrently.
- In-depth knowledge of security frameworks (e.g., NIST, PCI, ISO 27000 series) and regulatory requirements.
- Excellent organizational, leadership, decision-making, and communication skills.
- Strong project management skills with the ability to manage multiple tasks under tight deadlines.
Nice To have:
- Understanding of cloud security frameworks and risk management programs.
- Subject matter expertise in 3 or more Cybersecurity key control domains.
- Experience working in both regulated Financial Services and Financial Technology startup environments.
- Experience working in both US and Offshore geographies.
SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.
The Company hires the best qualified candidate for the job, without regard to protected characteristics.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
New York applicants: Notice of Employee Rights
SoFi is committed to embracing diversity. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email [email protected].
Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.
SoFi
2 views
