Lead Analyst IT Risk Management

Overview

We are currently seeking a Lead Analyst, IT Risk Management (ITRM), to lead the IT compliance awareness activities, coordinate all Cybersecurity related training and implement strategy for operationalizing Altria's Cyber Risk scoring approach.

This person will develop an expertise with new tools from Elevate security, Knowbe4 and MyPath; and learn compliance and records management working with Compliance & Integrity and Records Management respectively; and work with other areas to provide cyber related training.

In this role, you will:• Develop expertise in the field of compliance and records awareness while delivering respective plans and working relationships with those groups to deliver engaging awareness activities, communications, and videos.• Coordinate annual Payment Card Industry (PCI) assessment certifications and biannual HIPAA assessment reviews to keep Altria compliant. Improve PCI and HIPAA requirements and documentation periodically.• Lead the annual training schedule development, plan creation, selection of appropriate trainings and monitor for completion compliance.• Lead technical analyst on integration of additional security tool data into Cyber Risk Scoring tool and operational ownership of improving the enterprise scores with creative learning activities.• Lead the Governance Risk Compliance (GRC) platform, integrations, changes and support, including:• Lead 3rd party support of GRC tools to support needs of ITRM• Perform technical analyst of integration of GRC modules• Responsible for ongoing operations of GRC tools and improving those environments• Perform limited recertifications, control reviews and occasional other compliance related activities.• Leads efforts and exercises independent judgment and ensures adherence to overall role strategic plans.• Become knowledge manager for IS, provide compliance assistance to other subsidiary IS and monitor overall compliance of IS personnel• Lead contractors that assist in the development and execution of some of the activities.• Provide some Issue Management assistance until transitioned to new group

We want you to have:• 5-7 years of professional experience - preferably in compliance, controls, auditing, risk management or related field.• Experience with IT, compliance, and/or communications. Cybersecurity (a plus)• Demonstrated experience in partner engagement, influencing and providing strategic perspective.• Strong leadership and relationship management skills with ability to meet goals and timelines.• Strong interpersonal and written/verbal communication skills to work with internal and external partners, at all levels of organizations.

Company Overview

Altria has a leading portfolio of tobacco products for U.S. tobacco consumers 21+. Our tobacco companies - which have been the undisputed market leaders in the U.S. tobacco industry for decades - include some of the most enduring names in American business. In combustibles, we own Philip Morris USA, the maker of Marlboro cigarettes and John Middleton, manufacturer of Black & Mild cigars. Our smoke-free portfolio includes ownership of U.S. Smokeless Tobacco Company, the maker of Copenhagen and Skoal, and Helix Innovations, the maker of on! oral nicotine pouches. Additionally, we have a majority-owned joint venture with JT Group, Horizon Innovations, for the U.S. marketing and commercialization of heated tobacco stick products. Through a separate agreement with Philip Morris International, we have the exclusive U.S. commercialization rights to the IQOS* Tobacco Heating System® and Marlboro HeatSticks® through April 2024. Our equity investments include Anheuser-Busch InBev SA/NV, the world's largest brewer and Cronos Group, a leading Canadian cannabinoid company. Each Altria company is an equal opportunity employer. We are committed to providing individuals with criminal records, including formerly incarcerated individuals and individuals with conviction records, a fair chance at employment. Learn more about Altria at www.altria.com and follow us on Twitter, Facebook and LinkedIn