Company

　　Federal Reserve Bank of Atlanta

　　The Federal Banking Agencies (FBAs) jointly conduct the supervision of technology services provided by certain third-party service providers under the authority provided in the Bank Service Company Act (BSCA). The Service Provider Program currently includes third-party service providers that are deemed particularly systemically important (i.e., Significant Service Providers, or SSPs) and the ones that are deemed less so (Regional Service Providers, or RSPs). Oversight of the Federal Reserve’s supervision of SSPs will be conducted by the SSP Management Group (MG).

　　The SSP portfolio is looking for highly motivated individuals to join the Portfolio Coordination Group (PCG), which supports the SSP MG in carrying out the MG’s governance and oversight responsibilities over the Federal Reserve’s SSP portfolio. The PCG coordinates supervisory program execution to ensure portfolio-wide transparency and consistency in a manner aligned with the strategic direction, priorities and plans set forth by the SSP MG. The PCG Senior Risk Specialist will report functionally to the PCG Lead. Administrative reporting will be through the Federal Reserve Bank of Atlanta.

　　*This position can be located in Atlanta, GA OR any branch of the Federal Reserve Bank where you can meet the hybrid work requirement.

　　Key Responsibilities:

　　Contributes to review of cybersecurity and/or cloud security examinations to determine the effectiveness of a FI’s and SSP’s cybersecurity posture and validate remediation efforts of identified issues.

　　Contributes on Federal Reserve System and local cyber security and/or cloud security initiatives related to training, committees, and development of policy statements to enhance the supervision of FIs and SSPs.

　　Supports review of supervisory plans for relevant cybersecurity and/or cloud security areas and effective risk-based supervision factoring in size and complexity of target firms.

　　Conduct horizontal (second-level) reviews of key Central Point of Contact’s (CPC’s) work products such as supervisory plans / strategies, exam scopes, conclusion memos, supervisory letters and reports of examination, findings and ratings, vetting deliverables following first-level review by the Responsible Reserve Bank.

　　Lead initiatives that modernize SSP supervision and assist with the vetting preparation of supervisory strategies, significant findings, and ratings.

　　Conduct and contribute to cross-entity work (e.g., scenario-developed analysis)

　　Identify, develop, and execute horizontal review topics

　　Implement SSP program enhancements or policy changes

　　Develop quarterly portfolio-level continuous monitoring topics

　　Develop portfolio-level analytics packages and dashboards

　　Coordinate incident response, threat and vulnerability monitoring

　　In coordination with the Reserve Bank Managers and Reserve Bank Partner(s) responsible for overseeing SSP CPCs and SSP cyber resources

　　Contribute to OASiS implementation and enhancements

　　Other duties as assigned

　　Desired Skillset:

　　Strong knowledge of supervision and the examination process to drive change and manage risk

　　Strong understanding of operational and cyber resilience, cloud security, third-party risk management and legal and policy mandates in the financial sector that pertain to third-party risk management and cybersecurity risks and industry standards and guidance (i.e., FFIEC IT Handbook and NIST CSF)

　　Previous SSP CPC experience and examiner commission a plus

　　Strong critical thinking, analytical and data analysis skills

　　Proven ability to effectively influence outcomes and build consensus across multiple stakeholders

　　Ability to combine risk analysis with sound judgement in proposing recommendations

　　Ability to engage and influence cross-functional teams and work collaboratively with internal and external teams

　　Excellent oral and written communications skills

　　Ability to lead, juggle and effectively prioritize multiple projects simultaneously while meeting critical deadlines and stakeholder expectations

　　Sound judgment, tact and diplomacy as well as keen political savvy and experience navigating complex third-party risk and cybersecurity issues.

　　Experience:

　　Minimum 5 years of experience in at least some of the following domains:

　　Cyber Security and IT Risk management

　　Cloud Security

　　Cybersecurity response and resilience

　　IT Audit and/or IT examination or supervision

　　Change and Configuration Management

　　Asset and Lifecycle Management

　　Vendor risk management

　　Cybersecurity response and resilience

　　Data governance and security

　　Endpoint and server technologies

　　Intrusion detection and prevention systems

　　Identity access management and access control

　　Threat and vulnerability management

　　Problem and Incident Management

　　Effective written and verbal (including presentation and negotiation) communication skills in dealing with all levels of senior management, boards of directors and other regulatory agencies

　　Analytical, problems solving and time management skills

　　Familiarities with –

　　FFIEC, NIST, SANS and ISO standards and frameworks

　　Information security, cybersecurity, and risk management principles

　　Network management/architecture

　　Certifications/Licenses: Certified in CISSP, CISA, CISM, and/or industry certification is a plus. Cloud certification is preferred but not required.

　　Start Date: Looking to fill by March 1, 2024

　　Work Location: Within commuting distance of the Federal Reserve Bank of Atlanta, any of its branches, or another Federal Reserve Bank

　　Full-time / Part-time: Full-time (100 percent commitment)

　　Travel: Occasional travel is required with an expected range between 10% - 25%

　　Other Requirements and Considerations

　　Candidates should review the Bank’s Employee Code of Conduct to ensure compliance with conflicts of interest rules and personal investment restrictions. The Code is available on the About Us, Careers webpage at www.richmondfed.org

　　An applicant posting for employment as a Federal Reserve examiner/analyst must be a U.S. citizen or hold a permanent residence visa/Green Card and be an intending citizen

　　Under conflicts of interest guidelines administered by the Board of Governors of the Federal Reserve System, examining personnel may not participate on an examination of a financial institution or affiliate if the examiner was employed by the financial institution or affiliate within the past 12 months.

　　Please review the FRB Employee Code of Conduct to ensure there are no major issues related to your previous employment and current financial interests. (The Code is available at XXXXX.

　　FRB ethics rules generally prohibit employees and their immediate families from owning investments in banks, savings associations or their holding companies (Section 5.3). Additionally, employees engaged in Supervision and Regulation may be subject to borrowing and deposit restrictions. These employees may need to recuse themselves from certain supervisory work based on:

　　Their borrowing relationships (Appendix B Parts I.1, II.1 and II.2)

　　If a financial institution or service provider employs a member of the employee’s immediate family (i.e. spouse, child, parent, or sibling) (Appendix B Part I.3 and Part II.3)

　　If the individual was employed by the financial institution, service provider or affiliate within the past 12 months (Appendix B Part I.3 and II.3).

　　In certain cases, the recusal may be so extensive it could materially reduce the effectiveness of the prospective employee

　　Selected candidate is subject to special background check procedures

　　Job title and salary offered will be based on the job responsibilities and the individual’s knowledge, skills, and experience as defined in the job qualifications/experience.

　　Posting Eligibility: Posting open to current employees of the Board of Governors of the Federal Reserve System and Federal Reserve Banks, and qualified external candidates.

　　This is not necessarily an exhaustive list of all responsibilities, duties, performance standards or requirements, efforts, skills or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, management reserves the right to revise the job or to require that other or different tasks be performed when circumstances change (e.g. emergencies, rush jobs, change in workload or technological developments).

　　The Federal Reserve Bank of Atlanta is an equal opportunity employer.

　　Full Time / Part Time

　　Full time

　　Regular / Temporary

　　Regular

　　Job Exempt (Yes / No)

　　Yes

　　Job Category

　　Bank Examination

　　Work Shift

　　First (United States of America)

　　The Federal Reserve Banks believe that diversity and inclusion among our employees is critical to our success as an organization, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.

　　Privacy Notice (https://www.kansascityfed.org/documents/7797/Workday_Privacy_Notice.pdf)

　　OUR BANK has one of the most recognizable brands around the world. The Federal Reserve is the central bank of the United States—one of the world's most influential, trusted and prestigious financial organizations. The Federal Reserve is charged with the important mission of promoting a strong economy and a stable financial system and fulfills this responsibility by formulating national monetary policy, supervising and regulating banks and bank holding companies, and providing financial services for banks and the U.S. government.

　　OUR PEOPLE are diverse in background and ideas, which allows for ongoing creativity and innovation. Ultimately, they are the ones who push our high-performance, exchange-driven culture forward.

　　Why Our People Choose Us:

　　Our reputation precedes us

　　There will always be room for personal growth

　　Our people are first

　　You’ll find the right balance

　　Your responsibilities will be meaningful

　　We hope that you will be our future colleague.