MetLife Legal Plans · 1 day ago
GRC Security Specialist
MetLife Legal Plans is the country's largest provider of legal voluntary benefits, committed to providing excellent care to its plan members and sponsors. The Technology GRC Security Specialist will manage and enhance the company's technology risk management and security practices, ensuring compliance with laws and industry standards while safeguarding information assets.
ConsultingLegal
Responsibilities
Leading the development and implementation of MLP's IT risk management framework
Overseeing risk assessments, identifying potential threats, vulnerabilities, and assessing the impact on IT systems and data
Playing a key role in the development and enforcement of IT security policies, standards, and procedures
Ensuring that security policies align with industry best practices and regulatory requirements
Providing leadership in designing secure IT architectures and solutions
Collaborating with IT teams to ensure that security is integrated into system and application designs
Developing and delivering security awareness and training programs for employees
Promoting a culture of security awareness throughout the MLP
Leading the development and implementation of incident response plans
Coordinating response efforts in the event of security incidents, breaches, or vulnerabilities
Ensuring that IT systems and practices comply with relevant laws, regulations, and industry standards
Conducting regular audits to verify compliance and addressing any identified issues
Evaluating and selecting security technologies, tools, and solutions
Keeping abreast of emerging cybersecurity technologies and recommending their adoption
Collaborating with IT teams, including network security, application security, and system administrators
Providing guidance on security best practices and ensuring the implementation of security controls
Effectively communicating security risks, strategies, and mitigation plans to executive leadership and relevant stakeholders
Translating technical security concepts into business-oriented language
Analyzing security questionnaires received from Sponsors or third-party vendors
Evaluating responses to assess the security controls, practices, and policies in place
Guiding auditors through MLP's IT environment, including systems, networks, and security measures
Managing and organizing audit-related documentation, ensuring accuracy and completeness
Addressing queries and concerns raised by auditors during the audit process
Collaborating with internal teams to resolve issues promptly and efficiently
Leading contract negotiations with Sponsors
Ensuring that contracts include appropriate terms, conditions, and service level agreements
Collaborating with legal and procurement teams to finalize contractual agreements
Driving continuous improvement initiatives within the IT risk and security program
Conducting lessons learned sessions and adapting strategies based on evolving threats and technologies
Qualification
Required
5+ years of IT GRC & Security experience required
Preferred
Bachelors degree in computer science or related field highly preferred
Technical security certifications highly preferred
Prior experience leading and coaching a team highly preferred
Company
MetLife Legal Plans
Life is filled with moments where you might need legal help.
H1B Sponsorship
MetLife Legal Plans has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2024 (1)
2023 (1)
2022 (1)
2021 (2)
Funding
Current Stage
Growth StageRecent News
Company data provided by crunchbase