Experienced Information Security Manager – Technology Risk Management, Cybersecurity Oversight & Business Continuity Leadership

About arenaflex

Welcome to arenaflex, a globally recognized leader in financial services and innovative payment solutions. At arenaflex, we pride ourselves on delivering exceptional value to our customers while maintaining the highest standards of security, integrity, and compliance. As a company that has stood the test of time and continuously evolved with the changing landscape of digital finance, we understand that our success is deeply rooted in our ability to manage risk effectively and protect the interests of our stakeholders.

In today's rapidly evolving digital landscape, where cyber threats are becoming increasingly sophisticated and prevalent, arenaflex remains committed to staying ahead of potential risks. Our Global Risk and Compliance (GRC) team plays a pivotal role in ensuring that our organization operates safely and securely within regulatory expectations. We believe that effective risk management is not just a necessity but a strategic advantage that enables us to innovate with confidence while protecting our customers, partners, and shareholders.

Join arenaflex and become part of a dynamic team that values excellence, collaboration, and continuous learning. We offer an environment where your expertise in technology risk management will make a meaningful impact on the organization's overall security posture and strategic direction.

About the Role

Are you ready to take your career to the next level in a role that sits at the intersection of technology, cybersecurity, and enterprise risk management? arenaflex is seeking a highly skilled and motivated Information Security Manager to join our second-line technology risk oversight team within the Global Risk and Compliance group. This position reports directly to the Chief Risk Officer (CRO) and offers an exceptional opportunity to work with a diverse team of talented professionals who are responsible for building and maintaining our enterprise technology risk management program.

As an Information Security Manager at arenaflex, you will be responsible for providing independent risk oversight of technology, cybersecurity, and business continuity management risks across the organization. This role is critical in ensuring that our technology infrastructure and digital initiatives are aligned with our risk appetite and comply with all applicable regulatory requirements. You will collaborate with key stakeholders across lines of business and lines of defense to ensure risks are managed effectively and efficiently.

This is a unique opportunity to contribute to the development of a world-class technology risk management program while working alongside industry experts who are passionate about protecting the organization from emerging threats. If you are looking for a challenging yet rewarding role where you can make a real difference, this position is perfect for you.

Key Responsibilities

As an Information Security Manager at arenaflex, you will be entrusted with a wide range of responsibilities that are essential to maintaining our robust risk management framework. Your day-to-day activities will include:

• Independent Risk Oversight: Lead independent, proactive risk management and oversight of technology, cybersecurity, and business continuity management risks generated within business processes or arising from the use of technology solutions.


• Data-Driven Reviews: Conduct information-driven reviews focused on technology processes, cybersecurity controls, and business continuity management risks to identify potential vulnerabilities and areas for improvement.


• Advanced Data Analysis: Perform exploratory data analysis on large sets of structured data using SQL, Python, and Excel to develop meaningful insights into cybersecurity and technology-related information that informs risk decisions.


• Risk Indicator Development: Create and enhance data-driven key risk indicators (KRIs) and key performance indicators (KPIs) that provide real-time insights into risk and performance trends across the organization.


• Continuous Learning: Learn technology, cybersecurity, and business continuity management processes at arenaflex, demonstrating a strong willingness to learn and present effective valid challenges to existing practices.


• Regulatory Awareness: Stay proficient in relevant regulations, guidelines, and industry standards to ensure our risk management practices remain current and compliant.


• Program Development: Support the design of independent technology risk oversight programs that define engagement and integration with various risk management programs, including Process Risk Self-Assessments, Business Continuity Management, New Product Approval, and Mergers and Acquisitions.


• Stakeholder Collaboration: Effectively collaborate with key partners across lines of business and lines of defense to ensure risks are managed according to company policies and applicable regulatory requirements.


• Risk Reporting: Independently assess and report risks while providing a perspective on aggregate risks. Communicate findings to Senior Management, Risk Management Committees, the Board of Directors, and Regulators as appropriate.

Required Qualifications

To be successful in this role, you must possess a combination of education, experience, and skills that demonstrate your ability to excel in a dynamic risk management environment. The ideal candidate will have:

• Educational Background: A Bachelor's degree from an accredited institution. While not required, a degree in Computer Science or Information Systems is preferred.


• Professional Experience: A minimum of 5+ years of experience in risk management across any of the three lines of defense (first line, second line, or third line). This experience should demonstrate your ability to identify risks, analyze issues, and derive meaningful insights about risk trends by conducting interviews and analyzing large volumes of data.


• Technical Knowledge: A solid understanding of framework, cloud security, cyber intelligence, and cyber incident response areas. You should be familiar with the latest cybersecurity threats and mitigation strategies.


• Analytical Skills: Excellent analytical skills with high attention to detail and accuracy. You must be comfortable working with complex datasets and deriving actionable insights from them.


• Data Analysis Proficiency: Strong knowledge of at least one data mining/big data analytical tool such as Microsoft Excel (Pivot Tables), SQL, SAS, Python, or R.


• Problem-Solving Abilities: Excellent critical thinking and problem-solving skills that enable you to approach complex challenges with creativity and logic.


• Self-Motivation: Must be a self-starter who can work with minimal supervision and take ownership of deliverables.


• Communication Skills: Exceptional verbal, written, and interpersonal skills that allow you to communicate effectively with stakeholders at all levels of the organization.


• Intellectual Curiosity: The ability to challenge conventional thinking by actively engaging in constructive dialogue and proposing innovative solutions.

Preferred Qualifications

While the following qualifications are not mandatory, they will help you stand out as a top candidate and accelerate your success in this role:

• Educational Focus: Educational background in Computer Science or Information Systems, which provides a strong foundation for understanding technology risks.


• Diversified Risk Experience: Experience in risk management across cybersecurity, information technology, third-party, and business continuity management domains.


• Industry Certifications: Industry-recognized certifications such as CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), or CISSP (Certified Information Systems Security Professional).


• Cloud Security Certifications: Cloud security certifications including CCSK (Cloud Security Knowledge), CompTIA Cloud+, CCSP (Certified Cloud Security Professional), or Azure Security certifications.


• Risk Assessment Expertise: Understanding of risk assessment methodologies, techniques, and industry standards such as COSO, COBIT, ISO 27001, FAIR, or NIST RMF.


• Regulatory Knowledge: Knowledge of relevant policies and regulations including OCC Uplifted Standards, FFIEC IT booklets, and other financial services regulatory requirements.


• GRC Tools Experience: Experience with Governance, Risk, and Compliance tools that facilitate risk management activities and reporting.

Skills and Competencies for Success

At arenaflex, we value a diverse set of skills and competencies that enable our team members to thrive in a fast-paced, ever-changing environment. The ideal candidate will demonstrate:

• Strategic Thinking: The ability to think strategically about technology risks and their impact on business objectives, ensuring alignment between risk management and organizational goals.


• Collaboration: Strong teamwork and collaboration skills that enable effective partnerships with colleagues across different functions and levels of the organization.


• Adaptability: The flexibility to adapt to changing priorities and requirements in a dynamic risk landscape.


• Integrity: Unwavering commitment to ethical standards and professional conduct in all aspects of work.


• Innovation: A proactive approach to identifying opportunities for improving risk management processes and methodologies.


• Business Acumen: Understanding of how technology risks translate into business impacts and the ability to communicate this effectively to non-technical stakeholders.

Career Growth and Learning Opportunities

At arenaflex, we are deeply committed to the professional development and career growth of our employees. As an Information Security Manager, you will have access to a wide range of learning and development opportunities that will help you enhance your skills and advance your career.

You will work alongside experienced professionals who are leaders in their respective fields, providing you with invaluable mentorship and guidance. Our comprehensive training programs cover everything from emerging cybersecurity threats to advanced risk management methodologies, ensuring you stay at the forefront of industry best practices.

Furthermore, arenaflex supports professional certification and continuing education. We encourage our team members to pursue relevant certifications and provide resources to help you achieve them. Whether you're looking to deepen your expertise in cybersecurity, expand your knowledge of regulatory compliance, or develop leadership skills, arenaflex provides the platform and support you need to achieve your career aspirations.

Work Environment and Culture

arenaflex fosters a collaborative, inclusive, and innovative work environment where every employee is valued and empowered to contribute to our shared success. We believe that diverse perspectives and experiences make our team stronger and more effective in addressing the complex challenges of today's digital world.

Our culture is built on trust, transparency, and accountability. We encourage open communication and constructive dialogue, recognizing that the best ideas can come from anyone, regardless of their role or tenure. We celebrate achievements, support work-life balance, and prioritize the well-being of our employees.

As part of our commitment to flexibility, arenaflex offers remote work options that allow you to balance your professional and personal responsibilities effectively. We understand that modern work requires adaptability, and we strive to provide an environment where you can be productive and successful from virtually anywhere.

Compensation and Benefits

arenaflex is committed to providing competitive compensation and comprehensive benefits that recognize your contributions and support your overall well-being. The starting hourly rate for this position is $28 per hour, with opportunities for performance-based increases as you grow with the organization.

In addition to competitive pay, arenaflex offers a comprehensive benefits package that includes:

• Health and Wellness: Comprehensive health insurance coverage including medical, dental, and vision plans, as well as wellness programs and resources.


• Retirement Plans: 401(k) retirement savings plan with company matching contributions to help you build a secure financial future.


• Paid Time Off: Generous paid time off policies that allow you to recharge and maintain work-life balance.


• Professional Development: Access to training programs, certification support, and educational reimbursement opportunities.


• Employee Assistance Program: Confidential support services for personal and professional challenges.


• Additional Perks: Various employee perks and discounts that enhance your overall employment experience.

Join Our Team

If you are passionate about technology risk management, cybersecurity, and making a meaningful impact in a leading global organization, arenaflex invites you to apply for this exciting opportunity. We are looking for dedicated professionals who share our commitment to excellence and are eager to contribute to our mission of delivering secure, innovative financial solutions.

At arenaflex, you will find more than just a job – you will find a career where your skills are valued, your growth is supported, and your contributions make a real difference. Apply today and become part of a team that is shaping the future of secure financial services.

We are an equal opportunity employer and encourage candidates from all backgrounds to apply. Join arenaflex and help us build a safer, more secure financial world.