Hybrid Policy Management Consultant – Information Risk Consultant

at MassMutual

• Job title: Policy Management Consultant – Information Risk Consultant
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $104,900 - $137,700 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security
• Location requirements: Hybrid, Springfield, United States

About the role

• Policy Management Consultant developing policy management frameworks focusing on cybersecurity for MassMutual. Collaborating with stakeholders to implement effective governance practices and metrics.

Responsibilities

• Develop and implement a structured policy management framework to be used for all cybersecurity, data and technology-related policies.
• Design and implement formal policy review processes, including development, review and approval, periodic and scheduled recertification, and version control.
• Develop and manage a user-friendly policy repository with access controls, ensuring compliance with established guidelines.
• Create and provide templates, process documentation, user guides, etc. to assist owners with the creation of policy documents.
• Collaborate with owners to update, revise, publish, review, and recertify policy documentation.
• Produce audience-appropriate reports for senior management to provide updates on policy status and areas of concern.
• Develop, implement, and regularly produce appropriate metrics to provide status and quickly identify potential issues.
• Support the implementation of an integrated technology governance framework.
• Assist in creating appropriate materials for implementing process changes across the organization.
• Assist in developing other metrics and reports for the broader ETX Governance & Risk Framework.

Requirements

• 5+ years of experience developing policies and designing and administering a policy management system.
• 5+ years of experience in policy development roles focused on governance, risk, compliance, technology, and/or cybersecurity.
• 5+ years of experience in designing and executing metrics for programs to track program status and potential issues.
• Proficient at use of Word, Excel, SharePoint, and other tools for use in executing a Technology Integrated Governance program.
• Skilled in facilitating IT policy discussions among technical, non-technical, and external audiences.
• Proven ability to inform and influence others clearly, timely, and appropriately.
• Ability to meet tight deadlines and manage multiple priorities with urgency.
• Experience in applying change within a large technology organization.
• Excellent verbal and written communication skills.
• Bachelor’s degree in technology or business preferred.

Benefits

• Competitive salaries
• Incentive and bonus opportunities