Enterprise Risk Services Cover Letter

I submit this application to express my sincere interest in the enterprise risk services position.

In the previous role, I was responsible for support to internal/external audit for the risk & insurance as well as the treasury audit controls.

Please consider my experience and qualifications for this position:

• Have experience in working with multiple stakeholders from other countries’ global teams
• Exposure to Risk Management concepts
• Experience defining/documenting business processes and functions preferred
• Experience with RSA Archer eGRC Framework is preferred
• Knowledge of mapping risks to control and regulatory frameworks is preferred
• Experience in Marketing and/or Strategy and Execution is preferred
• Collaborate with other IT teams and develop security design architecture as part of the cloud migration/cloud deployment scenarios
• Define data protection strategy and controls for Protecting data deployed into different Cloud environments like Public, Private and Hybrid systems

In response to your job posting for enterprise risk services, I am including this letter and my resume for your review.

In the previous role, I was responsible for technical support for responding to and implementing recommendations of the Office of Inspector General and Internal Controls/Internal Audit.

Please consider my experience and qualifications for this position:

• Experience in writing requests for information / proposals given various types of objectives
• Experience in evaluation, testing and selecting tools
• Some project management skills preferable
• Be able to learn new technologies and solutions
• Good solution presentation skills
• Good technical writer skills
• Autonomous and committed to delivery milestones
• Hands on experience and a strong Information Security Technology Background Security

I submit this application to express my sincere interest in the enterprise risk services position.

In the previous role, I was responsible for internal assurance for D&M to demonstrate sufficient controls are in place to satisfy the CARM and Internal Technical Standards.

Please consider my qualifications and experience:

• Experience in strong Information Security Technology Background Security
• Experience with using common information security management frameworks, such as GDPR, International Standards Organisation (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• Holds security certifications such as the CISM, CISSP, CCSP, AWS certified solutions architect or Vendor certifications or other related information security related industry certification
• Apart from English, knowing additional languages like, French, German, Spanish would have an advantage
• Should drive the adoption of creative solutions to address complex, global IAM problems including IAM Analytics, IAM for cloud initiatives
• Should drive the adoption of Authentication and Authorization reference architectures for existing, new and emerging IAM technologies
• Should advise in the development of policies, standards and guidelines that direct the selection, development, implementation and use of enterprise Identity and Access technologies
• Should guide IAM designs to deliver high quality integration solutions that satisfy project and product requirements and meet customer’s Authentication and Access needs for the enterprise

I would like to submit my application for the enterprise risk services opening. Please accept this letter and the attached resume.

In the previous role, I was responsible for advice and share Internal Controls knowledge with business partner, manager and staff to strengthen governance, risk and controls environments, as appropriate.

Please consider my experience and qualifications for this position:

• Should have experience in strong Information Security Technology Background Security
• Should possess a knowledge of enterprise security environments, experience in security consulting services including impact on GRC from next generation solutions for IOT, Cloud etc
• Experience with using common information security management frameworks, such as GDPR, International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks
• Holds security certifications such as SSCP, CISM, CISSP, GSEC or other related information security related industry certification
• Manage the privacy risk assessment process
• Experience of cloud security solutions and their working, including licensing models
• Experience of security solution design or implantation in migrating IT systems to private and public cloud
• Experience in writing analysis, architecture and technical documents

I am excited to be applying for the position of enterprise risk services. Please accept this letter and the attached resume as my interest in this position.

In the previous role, I was responsible for appropriate support and guidance to address business queries or evaluation of internal & external audits of First Data’s risk management framework and internal controls.

Please consider my experience and qualifications for this position:

• Proven experience in a Consulting or a Technical Services company
• Proven knowledge of ISO31000 Risk Management & COSO ERM Framework
• Experience of managing ERM using RSA Archer (or similar) is desirable
• Proven skills in Business Process Improvement, Business Analysis, and Root Cause Analysis
• Strong communication skills and content creation skills (especially in PPT)
• Comfortable driving risk-related conversations with discretion at senior levels of the organization
• Process, project and/or change management experience preferred, preferably in a digital/collaborative technical environment
• Conduct Internal Controls over Financial Reporting (ICFR) scoping and materiality calculations for National Instrument 52-109 (NI 52-109) and Sarbanes-Oxley (SOX) 404 engagements