You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential. 

CNA seeks to offer a comprehensive and competitive benefits package to our employees that helps them — and their family members — achieve their physical, financial, emotional and social wellbeing goals.

For a detailed look at CNA’s benefits, check out our Candidate Guide.

JOB DESCRIPTION:

Essential Duties & Responsibilities

RCG Strategy and Transformation:

• Support the implementation of the target state program based on the planned roadmap for RCG focus areas including governance, risk management methodologies, technology enablement and automation, metrics, and reporting.
• Collaborate with the three lines of defense and other risk functions on behalf of RCG to support, enable and align the Risk and Controls Governance strategy within the broader CNA risk functions.
• Engage stakeholders at all levels across businesses and divisions to ensure effective communication and sufficient stakeholder input and buy-in.
• Help develop education, training, and awareness campaign materials regarding IT risks as well as critical communications to help provide clarity and adoption in support of the RCG program transformation.  

RCG Operational Activities:

• Execute Risk and Controls Governance operational activities including:
  • Risk profiling (inherent risk assessment);
  • Risk assessments for processes, applications and infrastructure;
  • Risk and scenario analysis for IT risks; and
  • Risk metrics and reporting .

• Document and develop materials for leadership to review issues identified through RCG activities.
• Help the business create, shepherd governance channels and monitor execution of the risk response plans in alignment with RCG methodology.
• Act as the point of contact to assist and respond to questions from key stakeholders and the business; manage required escalations and communication.
• Provide IT guidance and risk advisory support to key initiatives.
• Develop materials to provide regular updates to CNA Executives on the overall health of the program including preparing necessary information to facilitate management discussion and decision making.

Qualifications

• 3+ years of experience with IT Governance and risk functions
• Demonstrates a willingness to learn, self-starter and strong teaming capabilities
• Understanding of IT governance and technology risk management principles and best practices
• Strong interpersonal skills to support stakeholder communication and engagement across businesses
• Experience with technology process, risk and control framework
• Required: Bachelor’s degree
• Preferred: Knowledge and skills across
  • COSO
  • ISACA Risk IT framework
  • ISACA COBIT 5.0 or 2019
  • ISO 31000-series and 27000-series, 13335
  • NIST Cybersecurity framework

#Remote

#LI-JB1

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com.