Serve as an embedded information security and IT risk advisor and subject matter expert to one or more of the business unit IT groups of the Church. This includes supporting and enabling the implementation of security programs and controls, advising on the risk implications of architecture and design decisions, and assisting with the design and validation of risk reduction efforts within the assigned group.
Information Security Risk Managers also participate as experienced evaluators on a committee that identifies, documents and evaluates technology risks for the Church- so that policy, programs and strategic technology decisions can be informed by comprehensive and reliable assessment of risks.
Effective performance of these two purposes requires a combination of effective relationship management skills and a broad understanding of technology, business processes, and how they interplay in an enterprise to create and manage IT risk.
This individual works with divine guidance to provide or support technology that furthers the mission of the Church and reflects the eternal impact of the gospel.